General

  • Target

    JaffaCakes118_8aa3b91e30b1c8b7ac731df23d8dd3f5

  • Size

    647KB

  • Sample

    250328-n11rtaxlz4

  • MD5

    8aa3b91e30b1c8b7ac731df23d8dd3f5

  • SHA1

    1c9f69bef25805bec157c0701973b4256ffa2bd5

  • SHA256

    5a0235fc2ddf7cb86f688e476a9dcd9705b6ecbf16c0dbbb51524f2056991f40

  • SHA512

    af810a975d18d9dbcbb67cb615d2d0bdc93e248909e53fd00a723963b2305483d0cb2bdf43728b2a432b334eda7dcc8115c00f55c1985e50d2a20f9df5ec3d45

  • SSDEEP

    12288:46A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfha6:9AmBpVKHu0Mu9Xo20VGLVP5a6

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

queadx.zapto.org:82

Mutex

DC_MUTEX-LH8D45D

Attributes
  • gencode

    sygwyc�JSekr

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_8aa3b91e30b1c8b7ac731df23d8dd3f5

    • Size

      647KB

    • MD5

      8aa3b91e30b1c8b7ac731df23d8dd3f5

    • SHA1

      1c9f69bef25805bec157c0701973b4256ffa2bd5

    • SHA256

      5a0235fc2ddf7cb86f688e476a9dcd9705b6ecbf16c0dbbb51524f2056991f40

    • SHA512

      af810a975d18d9dbcbb67cb615d2d0bdc93e248909e53fd00a723963b2305483d0cb2bdf43728b2a432b334eda7dcc8115c00f55c1985e50d2a20f9df5ec3d45

    • SSDEEP

      12288:46A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfha6:9AmBpVKHu0Mu9Xo20VGLVP5a6

MITRE ATT&CK Enterprise v15

Tasks