Overview

overview

10

Static

static

10

JaffaCakes...ce.exe

windows7-x64

10

JaffaCakes...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5fdd809e1c97ad30c76c706e5abcffce

  • Size

    658KB

  • Sample

    250101-w2v7qazlbl

  • MD5

    5fdd809e1c97ad30c76c706e5abcffce

  • SHA1

    3ffde98a4bbd026491f33d32b07b288c38a8474a

  • SHA256

    2192b29253a8210247291c32ac988e7c81b04975ba5d82101bed06e0acdbe682

  • SHA512

    7a7407dbe30a5bafbc4f726156ca30bc08dc947fa747a2e09641cb1296cb0c383ef291770f65cccdd322eeb865106c07efed55bb00030b056ecc46feea9b90c7

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hL:mZ1xuVVjfFoynPaVBUR8f+kN10EBB

Score
10/10
darkcometöüüüííé ìïíïédiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

ÖÜÜÜÍíÉ ÌÏíÏÉ

C2

whm312.no-ip.biz:81

Mutex

DC_MUTEX-TLPUS3V

Attributes
  • gencode

    ebctfC0zBkhP

  • install

    false

  • offline_keylogger

    false

  • password

    123451

  • persistence

    false

Targets

    • Target

      JaffaCakes118_5fdd809e1c97ad30c76c706e5abcffce

    • Size

      658KB

    • MD5

      5fdd809e1c97ad30c76c706e5abcffce

    • SHA1

      3ffde98a4bbd026491f33d32b07b288c38a8474a

    • SHA256

      2192b29253a8210247291c32ac988e7c81b04975ba5d82101bed06e0acdbe682

    • SHA512

      7a7407dbe30a5bafbc4f726156ca30bc08dc947fa747a2e09641cb1296cb0c383ef291770f65cccdd322eeb865106c07efed55bb00030b056ecc46feea9b90c7

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hL:mZ1xuVVjfFoynPaVBUR8f+kN10EBB

    Score
    10/10
    darkcometöüüüííé ìïíïédiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Drops file in Drivers directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks