Overview

overview

10

Static

static

10

JaffaCakes...70.exe

windows7-x64

10

JaffaCakes...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1072b93588fdbdb25b00db6eb814f970

  • Size

    658KB

  • Sample

    250221-fvs6satmby

  • MD5

    1072b93588fdbdb25b00db6eb814f970

  • SHA1

    b14afdce8c57b8a2d1ec860f91aaf8e1c461a243

  • SHA256

    59c9e20fd7cbfee59dc55340692faddc44c92d1986e29407fad08b3bb2bc553e

  • SHA512

    1b98cf3f9939d5f3b07f0bfdf2df427acd4e33cd31bf3e032ad388c43503846da13e405b8cfde64e587a9527529e59e8700fab7049440046fa2d2862c1987589

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hZ:GZ1xuVVjfFoynPaVBUR8f+kN10EBb

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

joeastig.no-ip.biz:200

Mutex

DC_MUTEX-QNAR077

Attributes
  • gencode

    aztwn0WbA98G

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_1072b93588fdbdb25b00db6eb814f970

    • Size

      658KB

    • MD5

      1072b93588fdbdb25b00db6eb814f970

    • SHA1

      b14afdce8c57b8a2d1ec860f91aaf8e1c461a243

    • SHA256

      59c9e20fd7cbfee59dc55340692faddc44c92d1986e29407fad08b3bb2bc553e

    • SHA512

      1b98cf3f9939d5f3b07f0bfdf2df427acd4e33cd31bf3e032ad388c43503846da13e405b8cfde64e587a9527529e59e8700fab7049440046fa2d2862c1987589

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hZ:GZ1xuVVjfFoynPaVBUR8f+kN10EBb

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks