General

  • Target

    fe20fabfd161f2b0626f59f87668181c_JaffaCakes118

  • Size

    795KB

  • MD5

    fe20fabfd161f2b0626f59f87668181c

  • SHA1

    8e11a8cfae176127eade4d6067e97ecd64328e17

  • SHA256

    15430685b859b3a37e6fe88dc5ea8a0e2c373ebf3e07501e9bbd8bebd800305c

  • SHA512

    cd36eff3a23da54105c383e0abfa8cd937aa5796347b83c6c9e45b5c002309c3eac2d616063454949ce1d3693949123c4e0978027e4c505cf93400e6f2388d77

  • SSDEEP

    24576:jnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JJfprz4Mduc+:zELbVMTrOq494Mq

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

FUD

C2

m419.zapto.org:1604

Mutex

DC_MUTEX-6Q5QX3J

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    cBxUYTZjN6L3

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe20fabfd161f2b0626f59f87668181c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections