General
-
Target
JaffaCakes118_23df78180d2bb86a5658334ea2782077
-
Size
604KB
-
Sample
250226-fyw2va1qv6
-
MD5
23df78180d2bb86a5658334ea2782077
-
SHA1
e1e7a2804a90025825fc03b912c18aa3a0591693
-
SHA256
9392c3e7eb5d72da9405be00c4051aad3234d483ac0dc27e2e477f3f0612fb5f
-
SHA512
801ecda4e4e3afcc4ecacac452313a005b1333a2b0f3c43f35158dcf4a2da51a2b389bf3d1fed870860ce688934bd9ee97c04f8415e640c4c8cc7e56fd4355d7
-
SSDEEP
12288:cFcLKv/oxDPFt1TQFGTxk6d91OrCEvIT7mYVJWye:rw/KdaAOmQ6k5
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_23df78180d2bb86a5658334ea2782077.exe
Resource
win7-20241023-en
Malware Config
Extracted
darkcomet
Guest16
113.193.99.159:1604
- gencode
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
JaffaCakes118_23df78180d2bb86a5658334ea2782077
-
Size
604KB
-
MD5
23df78180d2bb86a5658334ea2782077
-
SHA1
e1e7a2804a90025825fc03b912c18aa3a0591693
-
SHA256
9392c3e7eb5d72da9405be00c4051aad3234d483ac0dc27e2e477f3f0612fb5f
-
SHA512
801ecda4e4e3afcc4ecacac452313a005b1333a2b0f3c43f35158dcf4a2da51a2b389bf3d1fed870860ce688934bd9ee97c04f8415e640c4c8cc7e56fd4355d7
-
SSDEEP
12288:cFcLKv/oxDPFt1TQFGTxk6d91OrCEvIT7mYVJWye:rw/KdaAOmQ6k5
-
Darkcomet family
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-