General

  • Target

    JaffaCakes118_605832881db7854af8dadf0e7eedaa93

  • Size

    662KB

  • Sample

    250101-ylxfys1mbz

  • MD5

    605832881db7854af8dadf0e7eedaa93

  • SHA1

    3b2d7ba26832a195f08b10a248a37cc408cb4239

  • SHA256

    bfda0213637ac44ca70bdee30d5d145b73dcb82b79351d02b43f70c8b603bc87

  • SHA512

    76a32ed1113b9636816bcf5aa73b5afd13a81365fd88ffaee188424359e49d1da4307f18325f809a4622c7f55a3bb46d94af35867adb394cab8f3f3996937254

  • SSDEEP

    12288:83OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R2:qOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgb0

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • gencode

    uieloWN63cgV

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_605832881db7854af8dadf0e7eedaa93

    • Size

      662KB

    • MD5

      605832881db7854af8dadf0e7eedaa93

    • SHA1

      3b2d7ba26832a195f08b10a248a37cc408cb4239

    • SHA256

      bfda0213637ac44ca70bdee30d5d145b73dcb82b79351d02b43f70c8b603bc87

    • SHA512

      76a32ed1113b9636816bcf5aa73b5afd13a81365fd88ffaee188424359e49d1da4307f18325f809a4622c7f55a3bb46d94af35867adb394cab8f3f3996937254

    • SSDEEP

      12288:83OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R2:qOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgb0

MITRE ATT&CK Enterprise v15

Tasks