Overview

overview

10

Static

static

10

JaffaCakes...56.exe

windows7-x64

10

JaffaCakes...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6d0073f6687511c35e8d39f3e8131756

  • Size

    658KB

  • MD5

    6d0073f6687511c35e8d39f3e8131756

  • SHA1

    7e42f148dc800d89e58405e269270c21f055b6d9

  • SHA256

    ae6e952450c6e35bfd8f822b5b2b25dc87c90a6b042a597d3f5947b0e7935d56

  • SHA512

    c4a58b67cae2c64307e77627ca303d3e39ef453d9c1a49d52c1dc111c65bd82495c7ae64ca27373848d29971cc20ac27de8f4daa543c1a5bc9f4da3a810d3147

  • SSDEEP

    12288:S9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hq:+Z1xuVVjfFoynPaVBUR8f+kN10EBM

Score
10/10
victimdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Victim

C2

tralalalalala.no-ip.biz:52270

Mutex

DCMIN_MUTEX-KGWGF07

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    0bwYxtYBJ6BM

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    tr

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6d0073f6687511c35e8d39f3e8131756
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections