General

  • Target

    JaffaCakes118_466ac122b6a3ad34739b8b1585134e50

  • Size

    252KB

  • Sample

    250101-ek72hstpby

  • MD5

    466ac122b6a3ad34739b8b1585134e50

  • SHA1

    c6c1e3244e01d7efabcbb9657c1832eecec4b0be

  • SHA256

    000fc1b17d8d2f687388fbe44ae50c9da6bb632596032590e3b82dd3a0e8c480

  • SHA512

    f3c53837a7776259152c0357285689042e2caaf7acb25f7244b5a9e2066c0ca62a62e38d20d7866395b5c7214a2d1185e56e4d88a7b680863631d3be50d4181a

  • SSDEEP

    6144:kD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZ:kl8E4w5huat7UovONzbXw

Malware Config

Extracted

Family

darkcomet

Botnet

Sexy

C2

conorburke.no-ip.biz:1604

Mutex

DC_MUTEX-LTG9L53

Attributes
  • gencode

    je0CkraEHjg6

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Targets

    • Target

      JaffaCakes118_466ac122b6a3ad34739b8b1585134e50

    • Size

      252KB

    • MD5

      466ac122b6a3ad34739b8b1585134e50

    • SHA1

      c6c1e3244e01d7efabcbb9657c1832eecec4b0be

    • SHA256

      000fc1b17d8d2f687388fbe44ae50c9da6bb632596032590e3b82dd3a0e8c480

    • SHA512

      f3c53837a7776259152c0357285689042e2caaf7acb25f7244b5a9e2066c0ca62a62e38d20d7866395b5c7214a2d1185e56e4d88a7b680863631d3be50d4181a

    • SSDEEP

      6144:kD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZ:kl8E4w5huat7UovONzbXw

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks