Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

174b5972d6...88.exe

windows7-x64

10

174b5972d6...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    174b5972d69914f05347976f206595a8a89e09968e9c52bb2b495bbd80639388

  • Size

    658KB

  • Sample

    221014-l13v3aacfl

  • MD5

    6ef0f2f4c7bd84eceff17aa19b819690

  • SHA1

    2405569f3b3b7e54989f5b4bb0a6dffeef961bd8

  • SHA256

    174b5972d69914f05347976f206595a8a89e09968e9c52bb2b495bbd80639388

  • SHA512

    15953bbe730249b73064b4a190d9dce2ed5c5755796ebc3875f1f86f75a878c25785b39db523f3cc501599932845de9d1ce79497112bc13353e2d5d9ba08e3b5

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hl:mZ1xuVVjfFoynPaVBUR8f+kN10EBz

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-DRR787B

Attributes
  • gencode

    ZMRqDsZs4xYc

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      174b5972d69914f05347976f206595a8a89e09968e9c52bb2b495bbd80639388

    • Size

      658KB

    • MD5

      6ef0f2f4c7bd84eceff17aa19b819690

    • SHA1

      2405569f3b3b7e54989f5b4bb0a6dffeef961bd8

    • SHA256

      174b5972d69914f05347976f206595a8a89e09968e9c52bb2b495bbd80639388

    • SHA512

      15953bbe730249b73064b4a190d9dce2ed5c5755796ebc3875f1f86f75a878c25785b39db523f3cc501599932845de9d1ce79497112bc13353e2d5d9ba08e3b5

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hl:mZ1xuVVjfFoynPaVBUR8f+kN10EBz

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks