General
-
Target
14f5a72d76df3c4b3d922f521d76924b_JaffaCakes118
-
Size
834KB
-
Sample
240627-gz8mpsyekk
-
MD5
14f5a72d76df3c4b3d922f521d76924b
-
SHA1
277c3d949f9d1c30b31fbe3748a2ecd69b6b140b
-
SHA256
0b00dfb0fb1c119a2dc6dd80e78208b65e7ddebde5e58309dcf4a2c6c8b0b87d
-
SHA512
271396ec216d15257a0e91e3f9a4776e42172cec95fd5f5f84387996ddd9dafc409000a5e3b9d5bc097a7270375ca60625649af4e098547dcf4a307aca5f100e
-
SSDEEP
24576:toEzLIjXPKMe68j+eTnYSK/cRgOnmq9g6R5/NF:toSIjfKjLjgRcOU7m6RvF
Static task
static1
Behavioral task
behavioral1
Sample
14f5a72d76df3c4b3d922f521d76924b_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
darkcomet
Guest16
127.0.0.1:1604
DC_MUTEX-5RWBU5Z
-
gencode
eK3b82cACp3o
-
install
false
-
offline_keylogger
true
-
password
moumene
-
persistence
false
Targets
-
-
Target
14f5a72d76df3c4b3d922f521d76924b_JaffaCakes118
-
Size
834KB
-
MD5
14f5a72d76df3c4b3d922f521d76924b
-
SHA1
277c3d949f9d1c30b31fbe3748a2ecd69b6b140b
-
SHA256
0b00dfb0fb1c119a2dc6dd80e78208b65e7ddebde5e58309dcf4a2c6c8b0b87d
-
SHA512
271396ec216d15257a0e91e3f9a4776e42172cec95fd5f5f84387996ddd9dafc409000a5e3b9d5bc097a7270375ca60625649af4e098547dcf4a307aca5f100e
-
SSDEEP
24576:toEzLIjXPKMe68j+eTnYSK/cRgOnmq9g6R5/NF:toSIjfKjLjgRcOU7m6RvF
-
Suspicious use of SetThreadContext
-