General
-
Target
JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b
-
Size
703KB
-
Sample
250323-3ehfnszsfx
-
MD5
883d243ebeb7842c7ede5bcc4ae1926b
-
SHA1
db529d12e8dba880365721539503aea82abe52a4
-
SHA256
0ac80e003ddb4327be56f390db7b9a06e8ae0806c6ee00ad414d2b25d2637235
-
SHA512
e675e4967e12a1531a5f51a93404512ac7bc73c2b1cf342c543ee039242795816742424862c9cfa00ba9b02e103fed2cb3e989e270b1d0ecded43d6727d65528
-
SSDEEP
12288:HiE71I2/tNJQ2WKCqhRxcV9L0s7IcupNtn32t9/leggM4hNnneLB8:HiE7O2/bGiRxcVasRsNtG79eggMwNneL
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
darkcomet
Guest16_min
68.63.132.222:1604
DCMIN_MUTEX-WCAY38R
-
gencode
H22hZtBkVAkc
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
JaffaCakes118_883d243ebeb7842c7ede5bcc4ae1926b
-
Size
703KB
-
MD5
883d243ebeb7842c7ede5bcc4ae1926b
-
SHA1
db529d12e8dba880365721539503aea82abe52a4
-
SHA256
0ac80e003ddb4327be56f390db7b9a06e8ae0806c6ee00ad414d2b25d2637235
-
SHA512
e675e4967e12a1531a5f51a93404512ac7bc73c2b1cf342c543ee039242795816742424862c9cfa00ba9b02e103fed2cb3e989e270b1d0ecded43d6727d65528
-
SSDEEP
12288:HiE71I2/tNJQ2WKCqhRxcV9L0s7IcupNtn32t9/leggM4hNnneLB8:HiE7O2/bGiRxcVasRsNtG79eggMwNneL
Score10/10-
Darkcomet family
-
Suspicious use of SetThreadContext
-