General
- Target JaffaCakes118_45ef79cd0ffa77cc22a9267d7c69b280
- Size 232KB
- Sample250101-eahzmswlgm
- SHA256 6788136a4f604f96bf8fbbdc7796e9bf57c55c9e41587fb8c4e38f9c7e28de67
- MD5 45ef79cd0ffa77cc22a9267d7c69b280
- SHA1 21e4b0ca17c5d670f6a996a21d51c4c78a84b17a
- SHA512 783903c091a4e529d700d590ebc0ebc385cbc295917e4bd420a8e2f2adfb6214be4244ae141452735d4e35090e7946be9c10289700741bed969f251e9615e8b3
- SSDEEP 6144:JjFy93LU92VxOtVflFud4TnxcpPTASCmqMorHwM095oS:VFy9bPQZlFjrG0ZmYbwjoS
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
JaffaCakes118_45ef79cd0ffa77cc22a9267d7c69b280.exe
Resource
win7-20240708-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
darkcomet
Botnet
-
Guest16_min
C2
-
192.168.2.102:1604
Mutex
-
DCMIN_MUTEX-MYLE8DG
Attributes
-
gencode
crFWbJBVKtvJ
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
- Target JaffaCakes118_45ef79cd0ffa77cc22a9267d7c69b280
- Size 232KB
- SHA256 6788136a4f604f96bf8fbbdc7796e9bf57c55c9e41587fb8c4e38f9c7e28de67
- MD5 45ef79cd0ffa77cc22a9267d7c69b280
- SHA1 21e4b0ca17c5d670f6a996a21d51c4c78a84b17a
- SHA512 783903c091a4e529d700d590ebc0ebc385cbc295917e4bd420a8e2f2adfb6214be4244ae141452735d4e35090e7946be9c10289700741bed969f251e9615e8b3
- SSDEEP 6144:JjFy93LU92VxOtVflFud4TnxcpPTASCmqMorHwM095oS:VFy9bPQZlFjrG0ZmYbwjoS
- MD5 SHA1 SHA512 SSDEEP
-
Darkcomet family