Overview

overview

10

Static

static

10

JaffaCakes...e8.exe

windows7-x64

10

JaffaCakes...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_25a7e92820a8ca1e5571bc5a546fdee8

  • Size

    811KB

  • MD5

    25a7e92820a8ca1e5571bc5a546fdee8

  • SHA1

    fc6d6c499b5fc213093d3470c8a3a2af7bd83a54

  • SHA256

    26f9f8ca45e78dc6649bde7867fba0b5e76534ed8cfa176b096b06c0b0db7864

  • SHA512

    085e558cc21d10d9cf57a155580ac8e834a62f85ad233c15ee7adb7120a23d78d25754bd94be799ed89f209fd374cd1a6fb8b31309e53927cedc3444f64bef7b

  • SSDEEP

    12288:oaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdGO4V:JAEENIq8XwyVPQclDq/+WnpsSM

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

windowsconnect.no-ip.biz:1604

Mutex

DC_MUTEX-57WVE57

Attributes
  • InstallPath

    Windupdt\winupdate.exe

  • gencode

    jka3Rd.�*-Ay

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    winupdater

rc4.plain

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_25a7e92820a8ca1e5571bc5a546fdee8
    .exe windows:4 windows x86 arch:x86

    d7e36004ab1e89f1a2dc92aba6a074a0


    Headers

    Imports

    Sections