Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e05f7b8e28...18.exe

windows7-x64

10

e05f7b8e28...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e05f7b8e28e8f66bcf8c2285fb5a7418

  • Size

    4.2MB

  • Sample

    240327-a6dycagb82

  • MD5

    e05f7b8e28e8f66bcf8c2285fb5a7418

  • SHA1

    7ecf8fb1f0b66cb822ffdb95c5af26a22a8f21ca

  • SHA256

    dca15b06df096c0c64040541b93cb082d36da00301e593df1e84c9c4c3755e4e

  • SHA512

    93f420af76dcac8cfb2478bf00c2540486f5fb7bd4cb10920be3bcab6f1656fbe9c433a0936492ba0e9dfe97b54a4b9ba58fcf1b2d8d3e6a7743902c15489804

  • SSDEEP

    24576:g8FD4Ib+69Q8VHHA3sE2CognHHdndjsmB/MOs9jqHL2+i+KFYQyNW8HFSGYcXHX0:vzvK8V56H9dt/imVlXc5

Score
10/10
darkcometrattrojan

Malware Config

Targets

    • Target

      e05f7b8e28e8f66bcf8c2285fb5a7418

    • Size

      4.2MB

    • MD5

      e05f7b8e28e8f66bcf8c2285fb5a7418

    • SHA1

      7ecf8fb1f0b66cb822ffdb95c5af26a22a8f21ca

    • SHA256

      dca15b06df096c0c64040541b93cb082d36da00301e593df1e84c9c4c3755e4e

    • SHA512

      93f420af76dcac8cfb2478bf00c2540486f5fb7bd4cb10920be3bcab6f1656fbe9c433a0936492ba0e9dfe97b54a4b9ba58fcf1b2d8d3e6a7743902c15489804

    • SSDEEP

      24576:g8FD4Ib+69Q8VHHA3sE2CognHHdndjsmB/MOs9jqHL2+i+KFYQyNW8HFSGYcXHX0:vzvK8V56H9dt/imVlXc5

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks