Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

359ec66530...71.exe

windows7-x64

1

359ec66530...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    359ec665305e1f1613b28f58743906f62239c46a394df6b2c3843e9aa5b90571

  • Size

    762KB

  • Sample

    221029-2svsgsbbbn

  • MD5

    5609b2223a6180c5633cefae5c4d41c5

  • SHA1

    00fc2f3eeff89da65239830ac94cc711209766ab

  • SHA256

    359ec665305e1f1613b28f58743906f62239c46a394df6b2c3843e9aa5b90571

  • SHA512

    868e130f179e9c0f8e0e5972d79a088ed3291ea166f685cd70d85f8390feca422bce8d2197acb2bdbf9983c6dece3031b1790dc7bcc7a5b527ee615449535451

  • SSDEEP

    12288:30jpc+Bl7sGIE196M/txC14ZLBsQJaBSY0bHqm2a0YkJJx+w2HOa90lHhQyZfnYq:4pJBNsEjlz84VBs8+X0bqyN6x+w2Hl9g

Score
10/10
darkcometpersistencerattrojan

Malware Config

Targets

    • Target

      359ec665305e1f1613b28f58743906f62239c46a394df6b2c3843e9aa5b90571

    • Size

      762KB

    • MD5

      5609b2223a6180c5633cefae5c4d41c5

    • SHA1

      00fc2f3eeff89da65239830ac94cc711209766ab

    • SHA256

      359ec665305e1f1613b28f58743906f62239c46a394df6b2c3843e9aa5b90571

    • SHA512

      868e130f179e9c0f8e0e5972d79a088ed3291ea166f685cd70d85f8390feca422bce8d2197acb2bdbf9983c6dece3031b1790dc7bcc7a5b527ee615449535451

    • SSDEEP

      12288:30jpc+Bl7sGIE196M/txC14ZLBsQJaBSY0bHqm2a0YkJJx+w2HOa90lHhQyZfnYq:4pJBNsEjlz84VBs8+X0bqyN6x+w2Hl9g

    Score
    10/10
    darkcometpersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks