Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

33e6685682...18.exe

windows7-x64

10

33e6685682...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33e668568255b8de07e1ba5a34bbada3_JaffaCakes118

  • Size

    235KB

  • Sample

    240710-jxlfhayale

  • MD5

    33e668568255b8de07e1ba5a34bbada3

  • SHA1

    6c4ad7fe066e1b2bd8a3ebf5375875ae93f67fcf

  • SHA256

    b63fdf28be1287aaadba09faec135752abbd6d24b3a7b2b19d8553e52a4e4e2c

  • SHA512

    15a0b02d44c5e7b2b45c59fe7ebf5c82d2b812fe2344953b42c151921ac117bc22ecc7fa3710e3ce9becce52852b6e94831074261524a4bc1c4537009ab3beb5

  • SSDEEP

    6144:WmDUj24gqU85IzrFA9NfmDuLpNr5NhWudrWDh7:WqUj2LkizrzDujVNhWucDJ

Score
10/10
darkcometxwzrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

xwz

C2

kuider.dyndns-at-home.com:1604

Mutex

DC_MUTEX-B218V5W

Attributes
  • gencode

    9nEcALkkhAmM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      33e668568255b8de07e1ba5a34bbada3_JaffaCakes118

    • Size

      235KB

    • MD5

      33e668568255b8de07e1ba5a34bbada3

    • SHA1

      6c4ad7fe066e1b2bd8a3ebf5375875ae93f67fcf

    • SHA256

      b63fdf28be1287aaadba09faec135752abbd6d24b3a7b2b19d8553e52a4e4e2c

    • SHA512

      15a0b02d44c5e7b2b45c59fe7ebf5c82d2b812fe2344953b42c151921ac117bc22ecc7fa3710e3ce9becce52852b6e94831074261524a4bc1c4537009ab3beb5

    • SSDEEP

      6144:WmDUj24gqU85IzrFA9NfmDuLpNr5NhWudrWDh7:WqUj2LkizrzDujVNhWucDJ

    Score
    10/10
    darkcometxwzrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks