General

  • Target

    JaffaCakes118_7c8930f869ccc61baa56c6f1d3602790

  • Size

    658KB

  • Sample

    250104-2kvshssqem

  • MD5

    7c8930f869ccc61baa56c6f1d3602790

  • SHA1

    7d02dc57af9997eba2d6923d2a8fd7e000398e78

  • SHA256

    d38f1e4319ff3dfccef91622971c004d687e65ac34a93abd9de198312de4a04f

  • SHA512

    66e61d06695ca8a842a4c8bde63d4aeff0aa48d56cb6ddcde235108c22dce5e8a961aba25e1304a05f88e019a03b6d857933e28366ce73918bbd411b3516c926

  • SSDEEP

    12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hG:OZ1xuVVjfFoynPaVBUR8f+kN10EBU

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

192.168.2.107:90

Mutex

DC_MUTEX-T1Y9PPF

Attributes
  • gencode

    sCUBEB3etTJL

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      JaffaCakes118_7c8930f869ccc61baa56c6f1d3602790

    • Size

      658KB

    • MD5

      7c8930f869ccc61baa56c6f1d3602790

    • SHA1

      7d02dc57af9997eba2d6923d2a8fd7e000398e78

    • SHA256

      d38f1e4319ff3dfccef91622971c004d687e65ac34a93abd9de198312de4a04f

    • SHA512

      66e61d06695ca8a842a4c8bde63d4aeff0aa48d56cb6ddcde235108c22dce5e8a961aba25e1304a05f88e019a03b6d857933e28366ce73918bbd411b3516c926

    • SSDEEP

      12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hG:OZ1xuVVjfFoynPaVBUR8f+kN10EBU

MITRE ATT&CK Enterprise v15

Tasks