Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.2fdf1218a636c6e1415dbd1f2eaf53a0.exe

  • Size

    293KB

  • Sample

    231014-wej6yagg9t

  • MD5

    2fdf1218a636c6e1415dbd1f2eaf53a0

  • SHA1

    3e9dd5bcde75be2aee3253d711afa0080f188dd4

  • SHA256

    1a787786968cfa9102f6ba5362d274349bf53f15f2dc0c9a70940edf7d626074

  • SHA512

    b395054ed37bbee9a9d6c3e3d9966c3f57587e90b8c440aed5b01442b360ac3f8b761cd3da305c9fba97a5f4d325b1c747a722ecc16e59ccf3e92f8aba226085

  • SSDEEP

    6144:YbaepOgEy+AT5JPPiFrF6UTcz/DJZoAwDuRS/xrZ:Qa2dEy+ATrPiFXEJZoAwDui

Malware Config

Targets

    • Target

      NEAS.2fdf1218a636c6e1415dbd1f2eaf53a0.exe

    • Size

      293KB

    • MD5

      2fdf1218a636c6e1415dbd1f2eaf53a0

    • SHA1

      3e9dd5bcde75be2aee3253d711afa0080f188dd4

    • SHA256

      1a787786968cfa9102f6ba5362d274349bf53f15f2dc0c9a70940edf7d626074

    • SHA512

      b395054ed37bbee9a9d6c3e3d9966c3f57587e90b8c440aed5b01442b360ac3f8b761cd3da305c9fba97a5f4d325b1c747a722ecc16e59ccf3e92f8aba226085

    • SSDEEP

      6144:YbaepOgEy+AT5JPPiFrF6UTcz/DJZoAwDuRS/xrZ:Qa2dEy+ATrPiFXEJZoAwDui

    Score
    10/10
    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Program crash

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks