Overview

overview

10

Static

static

10

234ef25bbf...18.exe

windows7-x64

10

234ef25bbf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    234ef25bbfe793d1d151f47979ed7deb_JaffaCakes118

  • Size

    747KB

  • Sample

    240703-ww31datbmh

  • MD5

    234ef25bbfe793d1d151f47979ed7deb

  • SHA1

    84e055864ae27015c6c442171f58c98eeaaa9f62

  • SHA256

    8546dcea20e2c07419df8a25ed04951ecf877adc29bb35ce3a4fb09cce7660f9

  • SHA512

    5c169f7b4f7f997030622c25ddbeaab41ace007f8bd0aba4101ff6e7d7a4f043a3303301097cad64aa9e201c683254948df5e6a3122a5d25d4d3186bf9c068c9

  • SSDEEP

    12288:qk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+2:n0QRWoJEfg0oChGdJQbjPbNW5tYeP+Gb

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

coolhost.no-ip.org:1604

192.168.1.3:1604
Mutex

DC_MUTEX-L46WSSE

Attributes
  • gencode

    3j3ytrthJfmJ

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      234ef25bbfe793d1d151f47979ed7deb_JaffaCakes118

    • Size

      747KB

    • MD5

      234ef25bbfe793d1d151f47979ed7deb

    • SHA1

      84e055864ae27015c6c442171f58c98eeaaa9f62

    • SHA256

      8546dcea20e2c07419df8a25ed04951ecf877adc29bb35ce3a4fb09cce7660f9

    • SHA512

      5c169f7b4f7f997030622c25ddbeaab41ace007f8bd0aba4101ff6e7d7a4f043a3303301097cad64aa9e201c683254948df5e6a3122a5d25d4d3186bf9c068c9

    • SSDEEP

      12288:qk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+2:n0QRWoJEfg0oChGdJQbjPbNW5tYeP+Gb

    Score
    10/10
    darkcometguest16rattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks