General
-
Target
JaffaCakes118_6355519ad74424ff0d253388af7843c6
-
Size
729KB
-
Sample
250102-hlryga1pdl
-
MD5
6355519ad74424ff0d253388af7843c6
-
SHA1
794d147a4e17f9e374cac731c87305365460b3f9
-
SHA256
4a332591f71933b7282825965da0a6940d5892f916f2875831fbe9eddb226236
-
SHA512
3ebc2de88c3179f075d707fdba94c4f60ef331d4c74d904557d2f6f7985d825d48ef164e72ad2e765525a1eb483bf48ae9b5ebc8efbe21d1e480b57e50b913fd
-
SSDEEP
12288:SCwuUJwM/FztUNLfe3qiixpvWm8UlXKKiWhHXbAOc9WQUgUPPtk4+tOQH5MCF7Ky:SFJjNztUc3cTOUlXLisAx9FUZC9Am5MK
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6355519ad74424ff0d253388af7843c6.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6355519ad74424ff0d253388af7843c6.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
darkcomet
Guest16_min
192.168.1.2:1604
DCMIN_MUTEX-1D6JZMY
-
gencode
goh2NYLaBQDr
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
JaffaCakes118_6355519ad74424ff0d253388af7843c6
-
Size
729KB
-
MD5
6355519ad74424ff0d253388af7843c6
-
SHA1
794d147a4e17f9e374cac731c87305365460b3f9
-
SHA256
4a332591f71933b7282825965da0a6940d5892f916f2875831fbe9eddb226236
-
SHA512
3ebc2de88c3179f075d707fdba94c4f60ef331d4c74d904557d2f6f7985d825d48ef164e72ad2e765525a1eb483bf48ae9b5ebc8efbe21d1e480b57e50b913fd
-
SSDEEP
12288:SCwuUJwM/FztUNLfe3qiixpvWm8UlXKKiWhHXbAOc9WQUgUPPtk4+tOQH5MCF7Ky:SFJjNztUc3cTOUlXLisAx9FUZC9Am5MK
Score10/10-
Darkcomet family
-
Suspicious use of SetThreadContext
-