Overview

overview

10

Static

static

10

JaffaCakes...40.exe

windows7-x64

10

JaffaCakes...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_23fd0cdcd30fa26355561815a2828340

  • Size

    658KB

  • Sample

    250226-gyt3xstqz7

  • MD5

    23fd0cdcd30fa26355561815a2828340

  • SHA1

    aa101567df75b174cb8e550b66e4a9a4bd3c577f

  • SHA256

    035e5a665174ccde2ab1b6b48de2644b43f67f279664ca517a6336002741b7b4

  • SHA512

    8512bdb133f1b59ffc785bfbc3838a9b0316d9fbe05103742d8c9040ecc72f5af7c9d93c902675206177930280a73423db16ad6992af629e9362bb5ad91e4083

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h8:mZ1xuVVjfFoynPaVBUR8f+kN10EBK

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

testserver1234.no-ip.biz:1300

Mutex

DC_MUTEX-V4DL6HL

Attributes
  • gencode

    wp3PGHaf7iU3

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_23fd0cdcd30fa26355561815a2828340

    • Size

      658KB

    • MD5

      23fd0cdcd30fa26355561815a2828340

    • SHA1

      aa101567df75b174cb8e550b66e4a9a4bd3c577f

    • SHA256

      035e5a665174ccde2ab1b6b48de2644b43f67f279664ca517a6336002741b7b4

    • SHA512

      8512bdb133f1b59ffc785bfbc3838a9b0316d9fbe05103742d8c9040ecc72f5af7c9d93c902675206177930280a73423db16ad6992af629e9362bb5ad91e4083

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h8:mZ1xuVVjfFoynPaVBUR8f+kN10EBK

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks