Overview

overview

10

Static

static

10

f233f52fb4...18.exe

windows7-x64

10

f233f52fb4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f233f52fb4c7597d642668f89803b16e_JaffaCakes118

  • Size

    658KB

  • Sample

    241215-enhwsstlew

  • MD5

    f233f52fb4c7597d642668f89803b16e

  • SHA1

    1fc2ed79e070e995d923b8a5a32187949e7c9bb6

  • SHA256

    f5d24f0baf80d360b6d5ee41883d08088a3c302ba4e66de1795d7f37073508fe

  • SHA512

    1fb7a177ef74d0e1034c02867bb369b4c0eb4e1410a4be968523a6fde40057900976c599feaef1a35aae72b6dc4f6c0e064e04f7884430eb3f733c403139945a

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hA:mZ1xuVVjfFoynPaVBUR8f+kN10EBe

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-XMT61ZY

Attributes
  • gencode

    r20j77j81xCB

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      f233f52fb4c7597d642668f89803b16e_JaffaCakes118

    • Size

      658KB

    • MD5

      f233f52fb4c7597d642668f89803b16e

    • SHA1

      1fc2ed79e070e995d923b8a5a32187949e7c9bb6

    • SHA256

      f5d24f0baf80d360b6d5ee41883d08088a3c302ba4e66de1795d7f37073508fe

    • SHA512

      1fb7a177ef74d0e1034c02867bb369b4c0eb4e1410a4be968523a6fde40057900976c599feaef1a35aae72b6dc4f6c0e064e04f7884430eb3f733c403139945a

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hA:mZ1xuVVjfFoynPaVBUR8f+kN10EBe

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks