General

  • Target

    JaffaCakes118_3ed73c03cdd7ed28a6961eb627dac1c4

  • Size

    745KB

  • Sample

    250302-jj3gvsy1gv

  • MD5

    3ed73c03cdd7ed28a6961eb627dac1c4

  • SHA1

    1119104493dad7088d60bc256e440511b9faa253

  • SHA256

    38b335461d96e496cd7132f9b9a62eece5ab11ca2d2bf5f53d57525b303d781c

  • SHA512

    aa90c389ba1ffab23ae4ba4508f290658dc2efeb43e5e216ea34be9b45f59db39810694903ad1bedb20012fb81c65177ca83aea9ea7d7927c47830e83e71dd94

  • SSDEEP

    12288:H6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfh3nk:aAmBpVKHu0Mu9Xo20VGLVP5Xk

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

slhack.no-ip.info:1604

Mutex

DC_MUTEX-GV60CKD

Attributes
  • gencode

    BbP6gWxAs7Gn

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_3ed73c03cdd7ed28a6961eb627dac1c4

    • Size

      745KB

    • MD5

      3ed73c03cdd7ed28a6961eb627dac1c4

    • SHA1

      1119104493dad7088d60bc256e440511b9faa253

    • SHA256

      38b335461d96e496cd7132f9b9a62eece5ab11ca2d2bf5f53d57525b303d781c

    • SHA512

      aa90c389ba1ffab23ae4ba4508f290658dc2efeb43e5e216ea34be9b45f59db39810694903ad1bedb20012fb81c65177ca83aea9ea7d7927c47830e83e71dd94

    • SSDEEP

      12288:H6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfh3nk:aAmBpVKHu0Mu9Xo20VGLVP5Xk

MITRE ATT&CK Enterprise v15

Tasks