General

  • Target

    f89e6abcba5b9946e47da02cee2ced9a_JaffaCakes118

  • Size

    661KB

  • MD5

    f89e6abcba5b9946e47da02cee2ced9a

  • SHA1

    0d8f39548a5eab3f0e1e665575a7b3d54e78edb1

  • SHA256

    93293359fafc0adf8d6c70211674401c4ea799b96d516ac9bc7e9aa694f72f90

  • SHA512

    0a5bf0e7b729f06c88cf65a7a66c38e39503cad4fedb750e993bba9fadd4d31838edcdee31b8f945d12d70af50e993ef41a36a40a33370642503b60e54a9b86c

  • SSDEEP

    12288:E9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hu:IZ1xuVVjfFoynPaVBUR8f+kN10EBw

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

ashkar.no-ip.org:1604

Mutex

DC_MUTEX-G0FAELX

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    ywEaUnUCbAtD

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f89e6abcba5b9946e47da02cee2ced9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections