General

  • Target

    JaffaCakes118_69aaed915121cd9fc39d764553d01050

  • Size

    658KB

  • Sample

    250103-cx4hraymcp

  • MD5

    69aaed915121cd9fc39d764553d01050

  • SHA1

    09be7821a4cd1e83e12c5952e76e092da9071abd

  • SHA256

    dbe3d094ab63a21add810f3ae748baf1b173d53593759c9b8573c28ede303242

  • SHA512

    e6bbb916bc27c625264878d203aec461aef8f4084e0044006b5d1f78453f6c1c0ea44f90dbb53c2f374cf75bee5a79fd30eacd17101bc6c13523454be64f3f56

  • SSDEEP

    12288:f9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hv:JZ1xuVVjfFoynPaVBUR8f+kN10EB5

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

t1m3r00t.ddns.net:1604

Mutex

DC_MUTEX-Q8DP3KV

Attributes
  • gencode

    GGL9mpFkD54r

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_69aaed915121cd9fc39d764553d01050

    • Size

      658KB

    • MD5

      69aaed915121cd9fc39d764553d01050

    • SHA1

      09be7821a4cd1e83e12c5952e76e092da9071abd

    • SHA256

      dbe3d094ab63a21add810f3ae748baf1b173d53593759c9b8573c28ede303242

    • SHA512

      e6bbb916bc27c625264878d203aec461aef8f4084e0044006b5d1f78453f6c1c0ea44f90dbb53c2f374cf75bee5a79fd30eacd17101bc6c13523454be64f3f56

    • SSDEEP

      12288:f9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hv:JZ1xuVVjfFoynPaVBUR8f+kN10EB5

MITRE ATT&CK Enterprise v15

Tasks