Overview

overview

10

Static

static

10

JaffaCakes...90.exe

windows7-x64

10

JaffaCakes...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6d818dc8eac5696f3169d335aa12db90

  • Size

    756KB

  • MD5

    6d818dc8eac5696f3169d335aa12db90

  • SHA1

    add3b0edfc541372fbf4181ea78483de04c21c7d

  • SHA256

    3e2b70491923a6e129272cb9a61a16034c9775ef0c4602a06737dd4035f19df3

  • SHA512

    acecbf393b2029985a166ed938230f201ff33b01f35e01af42762289d1651d91b12d63f63c92b1315ec81eac5a91c007d32a3d81b9e18efbb181e4540caf42ff

  • SSDEEP

    12288:o9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hiGC:cZ1xuVVjfFoynPaVBUR8f+kN10EBJC

Score
10/10
newhackdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

newHack

C2

hackerproff.no-ip.biz:1604

Mutex

DC_MUTEX-AEEZXYW

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    kFnezybML1Fw

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6d818dc8eac5696f3169d335aa12db90
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections