General

  • Target

    JaffaCakes118_6095557f4a0b3adafbfcd2c359741cd0

  • Size

    662KB

  • Sample

    250101-zltwhatlez

  • MD5

    6095557f4a0b3adafbfcd2c359741cd0

  • SHA1

    44315c704f9dea3d4d1b62e668f2b17354f1dca9

  • SHA256

    b5a97508145ae7bab5872c7078cc61dd90f4e789537a68cd86f185d8848a5450

  • SHA512

    7fc5d35d4a883af7e4bb68b16c626793e84d3fb0088fcb1f3fdc6766c0d605038645b80b816d3986796d5db6bf5ce1f913158a58882734ec1a40a77b88e21113

  • SSDEEP

    12288:k3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/Rv:yOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgb9

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

verzocht.no-ip.biz:1606

Mutex

DC_MUTEX-CBRMCQ1

Attributes
  • gencode

    ZSeAatPiYfp4

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_6095557f4a0b3adafbfcd2c359741cd0

    • Size

      662KB

    • MD5

      6095557f4a0b3adafbfcd2c359741cd0

    • SHA1

      44315c704f9dea3d4d1b62e668f2b17354f1dca9

    • SHA256

      b5a97508145ae7bab5872c7078cc61dd90f4e789537a68cd86f185d8848a5450

    • SHA512

      7fc5d35d4a883af7e4bb68b16c626793e84d3fb0088fcb1f3fdc6766c0d605038645b80b816d3986796d5db6bf5ce1f913158a58882734ec1a40a77b88e21113

    • SSDEEP

      12288:k3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/Rv:yOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgb9

MITRE ATT&CK Enterprise v15

Tasks