Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99
-
Size
2.1MB
-
Sample
221125-wa5l3sgb7v
-
MD5
06666b8c365f725fce6c099c63aa2342
-
SHA1
30f5e6c2566ccf5fb5f7bcfe8e8bc0bcd4352b3b
-
SHA256
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99
-
SHA512
b1ecfa68a162255b6042272399b008b275034553ddba137fcb1378fdfb08fe254a420d83b30e24ab6505f29e6343f3909fd6499c0f2ad7721ee29e92094eee7f
-
SSDEEP
49152:+kwkn9IMHea1xjBkMGXsgR+PS4+F7x7maPCS:NdnVdxNkMGXtKEx7VPC
Static task
static1
Behavioral task
behavioral1
Sample
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
darkcomet
ddddyyy
daynasmithx.ddns.net:100
DCMIN_MUTEX-UGTM8YB
-
InstallPath
DCSCMIN\explorer.exe
-
gencode
vhfpLUSAnw3d
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
explorer.exe
Targets
-
-
Target
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99
-
Size
2.1MB
-
MD5
06666b8c365f725fce6c099c63aa2342
-
SHA1
30f5e6c2566ccf5fb5f7bcfe8e8bc0bcd4352b3b
-
SHA256
12b0f55ad1876e48ccffa02bff9255e705a072755902c5bedef5a87e7993eb99
-
SHA512
b1ecfa68a162255b6042272399b008b275034553ddba137fcb1378fdfb08fe254a420d83b30e24ab6505f29e6343f3909fd6499c0f2ad7721ee29e92094eee7f
-
SSDEEP
49152:+kwkn9IMHea1xjBkMGXsgR+PS4+F7x7maPCS:NdnVdxNkMGXtKEx7VPC
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-