General

  • Target
    JaffaCakes118_45ef79cd0ffa77cc22a9267d7c69b280
  • Size 232KB
  • Sample250101-eahzmswlgm
  • SHA256 6788136a4f604f96bf8fbbdc7796e9bf57c55c9e41587fb8c4e38f9c7e28de67
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • darkcomet

Botnet
  • Guest16_min

C2
  • 192.168.2.102:1604

Mutex
  • DCMIN_MUTEX-MYLE8DG

Attributes
  • gencode

    crFWbJBVKtvJ

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target
      JaffaCakes118_45ef79cd0ffa77cc22a9267d7c69b280
    • Size 232KB
    • SHA256 6788136a4f604f96bf8fbbdc7796e9bf57c55c9e41587fb8c4e38f9c7e28de67
    • MD5 SHA1 SHA512 SSDEEP
    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks