Overview

overview

10

Static

static

10

JaffaCakes...ac.exe

windows10-2004-x64

10

JaffaCakes...ac.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_bcc2dd8464bab61684599b78716679ac

  • Size

    649KB

  • MD5

    bcc2dd8464bab61684599b78716679ac

  • SHA1

    53ed2d9022c3d725768b945cbc5aad6af09b8c76

  • SHA256

    533e64d700f6745e16d371d0543f88cfe3583ba605fdde3f046f29c4f8f0c76b

  • SHA512

    16d56d6482e059d79a536eea7af0e2f1677ba6ff4c32f9ecb65e2dcf60bd8dd9e1e5614354d67fa534ceebbddcb6eb3bde4fa80f899e1ba548638761e7447b63

  • SSDEEP

    12288:s6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfhRr:hAmBpVKHu0Mu9Xo20VGLVP5d

Score
10/10
rundarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Run

C2

goodluck.no-ip.org:135

Mutex

DC_MUTEX-PR2NC79

Attributes
  • InstallPath

    Windupdt\update.exe

  • gencode

    gCDP�Kyeh9HZ

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    Wind/update

rc4.plain

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_bcc2dd8464bab61684599b78716679ac
    .exe windows:4 windows x86 arch:x86

    10a01b7d45cd04ecca5b7df8581412d7


    Headers

    Imports

    Sections