Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

66db285985...c4.exe

windows7-x64

10

66db285985...c4.exe

windows10-2004-x64

10

Resubmissions

05/02/2025, 07:20

250205-h6kd5awmay 10

01/10/2022, 23:38

221001-3mysmacbc5 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66db285985f556e7e42d089e9eda4bca7cf71530079f9ae1ef9817ea84d21bc4

  • Size

    252KB

  • MD5

    6cae60795b0fc4e9f61e9ebb1e816fc0

  • SHA1

    8d8fc584ff9a299fac713ad4c15d9b4b067ea48f

  • SHA256

    66db285985f556e7e42d089e9eda4bca7cf71530079f9ae1ef9817ea84d21bc4

  • SHA512

    70129a0491ca9af017fe703f5a2ef42af7e1384f84298bd5fd43c0f8db80e7c754d7bbdb7e62112fe07c702bbdce2502e933dcf1c21410e058bb27ae069ef537

  • SSDEEP

    6144:ncNYk1yuwEDBum3qYWnl0pd0EX3Zq2b6wfIDYm0PHQ/9:ncWkbgTYWnYnt/IDYhPM

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

190.140.32.95:1604

Mutex

DC_MUTEX-SBEVJX1

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    l333XCQCQ04W

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 66db285985f556e7e42d089e9eda4bca7cf71530079f9ae1ef9817ea84d21bc4
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections