Overview

overview

10

Static

static

10

JaffaCakes...b0.exe

windows7-x64

10

JaffaCakes...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6a8be2ce0a8c195ae7c76f4664e423b0

  • Size

    690KB

  • MD5

    6a8be2ce0a8c195ae7c76f4664e423b0

  • SHA1

    41330c95dfc3d8b5ccba88a4011b3d65905a6a98

  • SHA256

    7ede8896911e3d481bd95fff720e2c9d9b8f6bdee57138952852860dfe45e72c

  • SHA512

    087d7c4fb3dc1f3daead38373a1160e246ae1367d236f8e8807ea6748bde4e4aed63efda24b8a81143d247a76a8a887746bd627ff0c30e5c376a2a1e8becbec3

  • SSDEEP

    12288:N9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hTP:nZ1xuVVjfFoynPaVBUR8f+kN10EBl

Score
10/10
ashiyane00.no-ip.infodarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

ashiyane00.no-ip.info

C2

127.0.0.1:1604

Mutex

DC_MUTEX-DY8RW8P

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    gjHijKePTQzX

  • install

    true

  • offline_keylogger

    true

  • password

    0123456789

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6a8be2ce0a8c195ae7c76f4664e423b0
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections