Overview

overview

10

Static

static

10

JaffaCakes...90.exe

windows7-x64

10

JaffaCakes...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5fd6f993536d8122c4589412255cd9fd4e8a08ac51cace2675f5babf04743190

  • Size

    658KB

  • MD5

    76d4c9d90b0f5da4c1e73f9557f5573e

  • SHA1

    eb547eb3df5d009b831eb46dafbc8950fa24e053

  • SHA256

    5fd6f993536d8122c4589412255cd9fd4e8a08ac51cace2675f5babf04743190

  • SHA512

    23f35541e9f08cee407f76af5ae590c3bcbc8f871aec1a840ef71d01eefc5b5ef719cc6caf28aae5cd8f8a41474797346b145137503368555dbc9e64c470cffd

  • SSDEEP

    12288:S9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h+:+Z1xuVVjfFoynPaVBUR8f+kN10EBs

Score
10/10
asdasddarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

asdasd

C2

5.tcp.eu.ngrok.io:19986

Mutex

DCMIN_MUTEX-8MP084D

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    vLG41lV8PwUB

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    Steam

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5fd6f993536d8122c4589412255cd9fd4e8a08ac51cace2675f5babf04743190
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections