General
-
Target
1837abb41ffb9e79123983cac207c736_JaffaCakes118
-
Size
288KB
-
Sample
240628-befhjasdka
-
MD5
1837abb41ffb9e79123983cac207c736
-
SHA1
32a8c2f2992c4634df31e98b68b66674ed91e182
-
SHA256
809073a0db03385ab8df958c6deb6b23510464102a4e16f4682d628043e2a9a3
-
SHA512
bf5f166c40f30b3c25619892f599f744d4a6cdd7a6f3340473d58b60f7dc1f29682775c81952e40ac7e292e9b404b77d938c9f5018375636e65bae0017fba78a
-
SSDEEP
6144:4sahRrWWf72qB1k05ihiaQLbbHVhaTCaPOQRTg2GNANvzETnen9vqMbWHTOux:4sahRtyqDk0LaQbbH3amrQRT0ANv/NuH
Static task
static1
Behavioral task
behavioral1
Sample
1837abb41ffb9e79123983cac207c736_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
darkcomet
Guest16
darkjared.no-ip.biz:1995
DC_MUTEX-F54S21D
-
gencode
P7Ql4gk1eeEG
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
1837abb41ffb9e79123983cac207c736_JaffaCakes118
-
Size
288KB
-
MD5
1837abb41ffb9e79123983cac207c736
-
SHA1
32a8c2f2992c4634df31e98b68b66674ed91e182
-
SHA256
809073a0db03385ab8df958c6deb6b23510464102a4e16f4682d628043e2a9a3
-
SHA512
bf5f166c40f30b3c25619892f599f744d4a6cdd7a6f3340473d58b60f7dc1f29682775c81952e40ac7e292e9b404b77d938c9f5018375636e65bae0017fba78a
-
SSDEEP
6144:4sahRrWWf72qB1k05ihiaQLbbHVhaTCaPOQRTg2GNANvzETnen9vqMbWHTOux:4sahRtyqDk0LaQbbH3amrQRT0ANv/NuH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-