Overview

overview

10

Static

static

10

JaffaCakes...f0.exe

windows7-x64

10

JaffaCakes...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_07b180444f094d8e4768f4758c4a25f0

  • Size

    649KB

  • Sample

    250219-zmw29azrw7

  • MD5

    07b180444f094d8e4768f4758c4a25f0

  • SHA1

    422247d5a693e7040725ff91552c0839d4c5124f

  • SHA256

    e0f89a1e6c0156ae22f6c7abaf69e7006d37b06d691cd6834fdfc29a2301caeb

  • SHA512

    0f327d23c1e72ee6bd9c8a81707338475a487835cd43aaf93c24a70ce60b0c999a9634ff7af060f7e69a2f869ccea0e1f18011ba337151d74b60c82768eb7281

  • SSDEEP

    12288:bk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+3:Q0QRWoJEfg0oChGdJQbjPbNW5tYeP+GW

Score
10/10
darkcometniggadiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Nigga

C2

Swaglife.no-ip.org:1604

Mutex

DC_MUTEX-HFX39F6

Attributes
  • gencode

    w0nVfxlQrwbT

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_07b180444f094d8e4768f4758c4a25f0

    • Size

      649KB

    • MD5

      07b180444f094d8e4768f4758c4a25f0

    • SHA1

      422247d5a693e7040725ff91552c0839d4c5124f

    • SHA256

      e0f89a1e6c0156ae22f6c7abaf69e7006d37b06d691cd6834fdfc29a2301caeb

    • SHA512

      0f327d23c1e72ee6bd9c8a81707338475a487835cd43aaf93c24a70ce60b0c999a9634ff7af060f7e69a2f869ccea0e1f18011ba337151d74b60c82768eb7281

    • SSDEEP

      12288:bk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+3:Q0QRWoJEfg0oChGdJQbjPbNW5tYeP+GW

    Score
    10/10
    darkcometniggadiscoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks