Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6168aa9956...ec.exe

windows7-x64

10

6168aa9956...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6168aa99561fa3e752cdf71c92dd62ca5d67845dd59b1d6ade6dee81e33ed9ec

  • Size

    743KB

  • Sample

    221205-xspt1sgb63

  • MD5

    f9a4039de5ab09f45ab1047cfdd1385e

  • SHA1

    3cad9077076e98212ebefb66e73125e7cf744d37

  • SHA256

    6168aa99561fa3e752cdf71c92dd62ca5d67845dd59b1d6ade6dee81e33ed9ec

  • SHA512

    fa08facc2d0f38d4c90347f077c2a6e366520af8554414966e512562058085e4e12d1f133300041773aee0294ceeee23a297203516d1801507ce90754e615c66

  • SSDEEP

    12288:39HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFNri9m9yO:RiBIGkbxqEcjsWiDxguehC2S19m9yO

Score
10/10
darkcometmultibotrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Multibot

C2

isayz.no-ip.info:1604

Mutex

DC_MUTEX-U7KG28Z

Attributes
  • gencode

    86UAZckbJfo0

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      6168aa99561fa3e752cdf71c92dd62ca5d67845dd59b1d6ade6dee81e33ed9ec

    • Size

      743KB

    • MD5

      f9a4039de5ab09f45ab1047cfdd1385e

    • SHA1

      3cad9077076e98212ebefb66e73125e7cf744d37

    • SHA256

      6168aa99561fa3e752cdf71c92dd62ca5d67845dd59b1d6ade6dee81e33ed9ec

    • SHA512

      fa08facc2d0f38d4c90347f077c2a6e366520af8554414966e512562058085e4e12d1f133300041773aee0294ceeee23a297203516d1801507ce90754e615c66

    • SSDEEP

      12288:39HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFNri9m9yO:RiBIGkbxqEcjsWiDxguehC2S19m9yO

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks