Overview

overview

10

Static

static

10

JaffaCakes...82.exe

windows7-x64

10

JaffaCakes...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_d027aca6cd2683cc0b1c78c8b6cd6082

  • Size

    658KB

  • Sample

    250209-rgnvpatpb1

  • MD5

    d027aca6cd2683cc0b1c78c8b6cd6082

  • SHA1

    563d812e158c202283add4980c00e1d6ce42a16f

  • SHA256

    21c12e872c23fee680085dac691f41d82e494f6d4877ab2296b84375a58e58fd

  • SHA512

    7adc3cc7159e87d4a537f01dcea9795e03f85e4dd7906e624d20356213d79cde2fb9479d1be295dec9a01660f1057f290e24b31e2c3cc9ec17e7febf9c432c72

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hY:uZ1xuVVjfFoynPaVBUR8f+kN10EBa

Score
10/10
darkcomettestdiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

test

C2

127.0.0.1:1111

Mutex

DC_MUTEX-E9EK3DN

Attributes
  • gencode

    1YqNhECqWtEs

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_d027aca6cd2683cc0b1c78c8b6cd6082

    • Size

      658KB

    • MD5

      d027aca6cd2683cc0b1c78c8b6cd6082

    • SHA1

      563d812e158c202283add4980c00e1d6ce42a16f

    • SHA256

      21c12e872c23fee680085dac691f41d82e494f6d4877ab2296b84375a58e58fd

    • SHA512

      7adc3cc7159e87d4a537f01dcea9795e03f85e4dd7906e624d20356213d79cde2fb9479d1be295dec9a01660f1057f290e24b31e2c3cc9ec17e7febf9c432c72

    • SSDEEP

      12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hY:uZ1xuVVjfFoynPaVBUR8f+kN10EBa

    Score
    10/10
    darkcomettestdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks