Overview

overview

10

Static

static

10

MacrosEffect.exe

windows7-x64

10

MacrosEffect.exe

windows10-2004-x64

10

sqlite3.dll

windows7-x64

3

sqlite3.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_63d3e068f33d466255e8503e647cf460

  • Size

    1.2MB

  • MD5

    63d3e068f33d466255e8503e647cf460

  • SHA1

    29a0fb9a9211c20773bbad546c2bfd31c24949cd

  • SHA256

    f0a438984aa2feb5b737431f2ecc278052e00c9d7bccdf34ae7a8f9ac3b32b7d

  • SHA512

    60259b36cb242cbd18c942d4562bd2596f8a59fd3d728212bddbab3d44ea4ed1bb19439e86f15f3483d8d6acd54d99a87d3e4c82d87b627144dd08d6604cca5d

  • SSDEEP

    24576:FZ1xuVVjfFoynPaVBUR8f+kN10EB941MIgum8NCzsooOPiXT6rSov2mjVw3wG:fQDgok30IcNcsoo+AgwmjSj

Score
10/10
èëüÿäàóídarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

ÈëüÿÄàóí

C2

uselad.servehttp.com:1604

Mutex

DC_MUTEX-ZL0C7HV

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    9kZAKeoXitRp

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_63d3e068f33d466255e8503e647cf460
    .rar
  • MacrosEffect.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections

  • Settings.ini
  • config.ini
  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    1b1a70babde0a2663fcc833b56850660


    Headers

    Imports

    Exports

    Sections