Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

12b0f55ad1...99.exe

windows7-x64

10

12b0f55ad1...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99

  • Size

    2.1MB

  • Sample

    221125-wa5l3sgb7v

  • MD5

    06666b8c365f725fce6c099c63aa2342

  • SHA1

    30f5e6c2566ccf5fb5f7bcfe8e8bc0bcd4352b3b

  • SHA256

    12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99

  • SHA512

    b1ecfa68a162255b6042272399b008b275034553ddba137fcb1378fdfb08fe254a420d83b30e24ab6505f29e6343f3909fd6499c0f2ad7721ee29e92094eee7f

  • SSDEEP

    49152:+kwkn9IMHea1xjBkMGXsgR+PS4+F7x7maPCS:NdnVdxNkMGXtKEx7VPC

Score
10/10
darkcometddddyyypersistencerattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

ddddyyy

C2

daynasmithx.ddns.net:100

Mutex

DCMIN_MUTEX-UGTM8YB

Attributes
  • InstallPath

    DCSCMIN\explorer.exe

  • gencode

    vhfpLUSAnw3d

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    explorer.exe

Targets

    • Target

      12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99

    • Size

      2.1MB

    • MD5

      06666b8c365f725fce6c099c63aa2342

    • SHA1

      30f5e6c2566ccf5fb5f7bcfe8e8bc0bcd4352b3b

    • SHA256

      12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99

    • SHA512

      b1ecfa68a162255b6042272399b008b275034553ddba137fcb1378fdfb08fe254a420d83b30e24ab6505f29e6343f3909fd6499c0f2ad7721ee29e92094eee7f

    • SSDEEP

      49152:+kwkn9IMHea1xjBkMGXsgR+PS4+F7x7maPCS:NdnVdxNkMGXtKEx7VPC

    Score
    10/10
    darkcometddddyyypersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks