General

  • Target

    JaffaCakes118_69948e09d591e268dcda4ab2e69c5e90

  • Size

    658KB

  • Sample

    250103-ckapxavmdx

  • MD5

    69948e09d591e268dcda4ab2e69c5e90

  • SHA1

    ee99170e15efa2827b0a6bc4af02161838e3c674

  • SHA256

    ce9311bb05f9dcff7cd1395670c59c3ae216c4005a8ddef15531c0628cd0df23

  • SHA512

    3057d21e5a8d702e790f295f3d97413bdba54b674739ae2a10ed4fb639dcd539a7fcba01e789a4e4b2fee56d5a6950f9d0d3b48fc1255cb37a75351c70874fcb

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hE:GZ1xuVVjfFoynPaVBUR8f+kN10EBy

Malware Config

Extracted

Family

darkcomet

Botnet

Slavez

C2

jedi430.no-ip.biz:2000

Mutex

DC_MUTEX-5R03H9H

Attributes
  • gencode

    cBgndpnxl1ng

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_69948e09d591e268dcda4ab2e69c5e90

    • Size

      658KB

    • MD5

      69948e09d591e268dcda4ab2e69c5e90

    • SHA1

      ee99170e15efa2827b0a6bc4af02161838e3c674

    • SHA256

      ce9311bb05f9dcff7cd1395670c59c3ae216c4005a8ddef15531c0628cd0df23

    • SHA512

      3057d21e5a8d702e790f295f3d97413bdba54b674739ae2a10ed4fb639dcd539a7fcba01e789a4e4b2fee56d5a6950f9d0d3b48fc1255cb37a75351c70874fcb

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hE:GZ1xuVVjfFoynPaVBUR8f+kN10EBy

MITRE ATT&CK Enterprise v15

Tasks