General
- Target f81fb0b6d27a21a39d307ed5fe4d6392_JaffaCakes118
- Size 658KB
- Sample241216-j7261askbw
- SHA256 3dea9945d8c34546030f549869b1915a5c364e9f90258f308cc63a51829a3972
- MD5 f81fb0b6d27a21a39d307ed5fe4d6392
- SHA1 1fe9b25118f4fb5a91fa32fb169814722743d642
- SHA512 baee82575a95c00e47f70783a76ccd034aebbe950a079df9898e88dc71eaf6283afcf8d089eea8c871841a286f8a5ff5ae9c64d3cd9e2b4c9db8f4233cda92fe
- SSDEEP 12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hX:mZ1xuVVjfFoynPaVBUR8f+kN10EBZ
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
f81fb0b6d27a21a39d307ed5fe4d6392_JaffaCakes118.exe
Resource
win7-20240903-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
darkcomet
Botnet
-
Guest16
C2
-
127.0.0.1:1604
Mutex
-
DC_MUTEX-QZ7LPZR
Attributes
-
gencode
J7dahVwc2S9Z
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
- Target f81fb0b6d27a21a39d307ed5fe4d6392_JaffaCakes118
- Size 658KB
- SHA256 3dea9945d8c34546030f549869b1915a5c364e9f90258f308cc63a51829a3972
- MD5 f81fb0b6d27a21a39d307ed5fe4d6392
- SHA1 1fe9b25118f4fb5a91fa32fb169814722743d642
- SHA512 baee82575a95c00e47f70783a76ccd034aebbe950a079df9898e88dc71eaf6283afcf8d089eea8c871841a286f8a5ff5ae9c64d3cd9e2b4c9db8f4233cda92fe
- SSDEEP 12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hX:mZ1xuVVjfFoynPaVBUR8f+kN10EBZ
- MD5 SHA1 SHA512 SSDEEP
-
Darkcomet family