Overview

overview

10

Static

static

10

JaffaCakes...e9.exe

windows7-x64

10

JaffaCakes...e9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6ef1a6bb83d23acec08e30d7abab9be9

  • Size

    760KB

  • MD5

    6ef1a6bb83d23acec08e30d7abab9be9

  • SHA1

    f66db75070350ade122cdafd13b41d22cac090b8

  • SHA256

    ce04a7649eb55d5c708e641becbc2d27286e2ff2a10fbc08e7a614f949206235

  • SHA512

    c8afd298a440927553ae774c4d98cefebbc8df66aebe90fba3c5eff4507493e2b24e484288fa8d484a32145bf020e5c942fae5f50930ab5e3bc8fd80e1e23da9

  • SSDEEP

    12288:S3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/RK:cOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgbk

Score
10/10
cleme,t darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

cleme,t

C2

89.85.72.86:1604

Mutex

DC_MUTEX-H5XHRBV

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    7c07s2oMe1Pg

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6ef1a6bb83d23acec08e30d7abab9be9
    .exe windows:4 windows x86 arch:x86

    ebfc01781fe5d13ae5cf3546d3da52da


    Headers

    Imports

    Sections