Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

26700ee654...be.exe

windows7-x64

10

26700ee654...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26700ee6548ebd591e29a840f809c6be

  • Size

    303KB

  • Sample

    231225-r28etscgh2

  • MD5

    26700ee6548ebd591e29a840f809c6be

  • SHA1

    fc475a65d63f69fc9463860215119fa0d4a18d97

  • SHA256

    22cd06dcc778f91c3a61df3021413943a4d31d13156eea60e68cb048b79789cd

  • SHA512

    0d55d5bdc24e998a19ffbb01e97f399af68c542739ad07a238cf2e37b089affe6d2c16eb98fff4659b17582dc506e6e3622ac1aeeb933f2e47abb76b790b6d5e

  • SSDEEP

    6144:4ZkFT/GI9PHxIpbQLvfXZP1/Sg1sgXXp7zpaAy:4md+I9PHxIeHpPMg1R7laAy

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:81

Mutex

DC_MUTEX-B2ZNMAP

Attributes
  • gencode

    R7dNoFBljKP6

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      26700ee6548ebd591e29a840f809c6be

    • Size

      303KB

    • MD5

      26700ee6548ebd591e29a840f809c6be

    • SHA1

      fc475a65d63f69fc9463860215119fa0d4a18d97

    • SHA256

      22cd06dcc778f91c3a61df3021413943a4d31d13156eea60e68cb048b79789cd

    • SHA512

      0d55d5bdc24e998a19ffbb01e97f399af68c542739ad07a238cf2e37b089affe6d2c16eb98fff4659b17582dc506e6e3622ac1aeeb933f2e47abb76b790b6d5e

    • SSDEEP

      6144:4ZkFT/GI9PHxIpbQLvfXZP1/Sg1sgXXp7zpaAy:4md+I9PHxIeHpPMg1R7laAy

    Score
    10/10
    darkcometguest16rattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks