Overview

overview

10

Static

static

10

JaffaCakes...50.exe

windows7-x64

10

JaffaCakes...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1e24aa8195240fba9ea4e28a8e105c50

  • Size

    658KB

  • Sample

    250223-ds13havrav

  • MD5

    1e24aa8195240fba9ea4e28a8e105c50

  • SHA1

    c17f1c94d98cbade1b7fe6dbb556c876457e8add

  • SHA256

    307eca1f4c40b1473f42ef50b9a00a1f899316246e59f5ffb3136671dd147243

  • SHA512

    c39c961fa3a90c2c94aa21b5e1d47b30dc3552d8f73b42bf76c300dc61e230f161823cacd44c38132b11bbd894c2dd1d9c95ce54000d157aac7b9020c16f5e35

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hw:mZ1xuVVjfFoynPaVBUR8f+kN10EBG

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-HQ6WCHA

Attributes
  • gencode

    1Px6GGRMCbys

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_1e24aa8195240fba9ea4e28a8e105c50

    • Size

      658KB

    • MD5

      1e24aa8195240fba9ea4e28a8e105c50

    • SHA1

      c17f1c94d98cbade1b7fe6dbb556c876457e8add

    • SHA256

      307eca1f4c40b1473f42ef50b9a00a1f899316246e59f5ffb3136671dd147243

    • SHA512

      c39c961fa3a90c2c94aa21b5e1d47b30dc3552d8f73b42bf76c300dc61e230f161823cacd44c38132b11bbd894c2dd1d9c95ce54000d157aac7b9020c16f5e35

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hw:mZ1xuVVjfFoynPaVBUR8f+kN10EBG

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks