Overview

overview

10

Static

static

10

JaffaCakes...92.exe

windows7-x64

10

JaffaCakes...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_865a76dfc19b433afb42e655c9001592

  • Size

    412KB

  • MD5

    865a76dfc19b433afb42e655c9001592

  • SHA1

    a8e90d5c7202b45aa5ecd9a9e09d95c1cad331c0

  • SHA256

    10a199ce0118059a4f2bf5fbd5a7680096a419429913802b00a3305ddc22e290

  • SHA512

    484d1e554e4984829c213a66e9aca81bb47933b247ace3a0a6daef5e66b9ba3dc57ce60a193b691d5b051c16d954b2a7950ebecfd1543bf086b577b4944333df

  • SSDEEP

    12288:e0Siiu2cOMayaZerXXmhFXS7VS+vcXKmg3kL:k3gV6eih+TvIKmgU

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

62.195.250.128 :20

127.0.0.1:20
Mutex

DC_MUTEX-Y9XUFHU

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    tDz+N/NQx2CU

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

rc4.plain
1
#KCMDDC42F#-890

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_865a76dfc19b433afb42e655c9001592
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.