General
-
Target
JaffaCakes118_211d45d59f210bbe8bf5556fcedbea8c
-
Size
923KB
-
Sample
250223-qxyjdszkgx
-
MD5
211d45d59f210bbe8bf5556fcedbea8c
-
SHA1
22d3395b6e41ba782b3d28f391d34d7427104bae
-
SHA256
39ae887d66154cb3eca68542367de8142d70eb39ea7a4a81eab59bf2fa018257
-
SHA512
cdcd964a0370dcc3b1f82ff80df66307826ecdb2d1084a6cecc03abbf76ca1daabb181c7ceca98cda3488a4f5b48350da012a4022f03e4b68ed38d014a20fcc6
-
SSDEEP
12288:jJIcSFZUBEnlVq5EAwrg78u2DtII20gqQk8PdJ:jScSZZAgBqIx/Qke
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_211d45d59f210bbe8bf5556fcedbea8c.exe
Resource
win7-20240903-en
Malware Config
Extracted
darkcomet
- gencode
-
install
false
-
offline_keylogger
false
-
persistence
false
Extracted
darkcomet
Crypted
n3k3m.hopto.org:1604
DC_MUTEX-SGBNJKW
-
gencode
+#W%f�m/qz62
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
JaffaCakes118_211d45d59f210bbe8bf5556fcedbea8c
-
Size
923KB
-
MD5
211d45d59f210bbe8bf5556fcedbea8c
-
SHA1
22d3395b6e41ba782b3d28f391d34d7427104bae
-
SHA256
39ae887d66154cb3eca68542367de8142d70eb39ea7a4a81eab59bf2fa018257
-
SHA512
cdcd964a0370dcc3b1f82ff80df66307826ecdb2d1084a6cecc03abbf76ca1daabb181c7ceca98cda3488a4f5b48350da012a4022f03e4b68ed38d014a20fcc6
-
SSDEEP
12288:jJIcSFZUBEnlVq5EAwrg78u2DtII20gqQk8PdJ:jScSZZAgBqIx/Qke
-
Darkcomet family
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-