Overview

overview

10

Static

static

10

JaffaCakes...d6.exe

windows7-x64

10

JaffaCakes...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0e9b3698ae1718f0ffcddcc3cf6be9d6

  • Size

    658KB

  • Sample

    250220-2l99laynw4

  • MD5

    0e9b3698ae1718f0ffcddcc3cf6be9d6

  • SHA1

    615f4d395ebab5a2e3847811656a5dacad2d1a17

  • SHA256

    1c34b22306b4c23d7661721a8aeeb8d7d113d794de406c9a101cb233f80e6e57

  • SHA512

    0582d04f10943350117063e0e7106af0c9c6cee108a0ce8a309afdf4ce6e0c442bc5675739acbbfe688739856200b0e1007b89dead08932592c49f32adff3b1e

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hn:mZ1xuVVjfFoynPaVBUR8f+kN10EBh

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-WB74EZH

Attributes
  • gencode

    drvs80b4RNMy

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_0e9b3698ae1718f0ffcddcc3cf6be9d6

    • Size

      658KB

    • MD5

      0e9b3698ae1718f0ffcddcc3cf6be9d6

    • SHA1

      615f4d395ebab5a2e3847811656a5dacad2d1a17

    • SHA256

      1c34b22306b4c23d7661721a8aeeb8d7d113d794de406c9a101cb233f80e6e57

    • SHA512

      0582d04f10943350117063e0e7106af0c9c6cee108a0ce8a309afdf4ce6e0c442bc5675739acbbfe688739856200b0e1007b89dead08932592c49f32adff3b1e

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hn:mZ1xuVVjfFoynPaVBUR8f+kN10EBh

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks