General

  • Target

    JaffaCakes118_4d7ad42cd5853d0fe092fd6f0e308580

  • Size

    691KB

  • Sample

    250101-j2b3maskbq

  • MD5

    4d7ad42cd5853d0fe092fd6f0e308580

  • SHA1

    8f2b423392d7c6d5ec99f6db1a5abba7aa1f7096

  • SHA256

    201474f250f5a72d5bb72fe70a1e675bb1810641e98f55f3bdb405c5ac34f9f9

  • SHA512

    6469d18b7838bca79a3e487e31f22caa9d337da9f77d3ed667795d8cc94f5a86c126a593b4109990c4c0a9c015f51563b494463792b6cee5158201b879ebc7b9

  • SSDEEP

    12288:oXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UU:OnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JE

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

iixrakanxii.sytes.net:1604

iixrakaxii.sytes.net:1604

Mutex

DC_MUTEX-J4B0RDQ

Attributes
  • gencode

    0gNqsRWX8U5b

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_4d7ad42cd5853d0fe092fd6f0e308580

    • Size

      691KB

    • MD5

      4d7ad42cd5853d0fe092fd6f0e308580

    • SHA1

      8f2b423392d7c6d5ec99f6db1a5abba7aa1f7096

    • SHA256

      201474f250f5a72d5bb72fe70a1e675bb1810641e98f55f3bdb405c5ac34f9f9

    • SHA512

      6469d18b7838bca79a3e487e31f22caa9d337da9f77d3ed667795d8cc94f5a86c126a593b4109990c4c0a9c015f51563b494463792b6cee5158201b879ebc7b9

    • SSDEEP

      12288:oXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UU:OnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JE

MITRE ATT&CK Enterprise v15

Tasks