Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

341b77aef0...18.exe

windows7-x64

10

341b77aef0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    341b77aef07a6db7a0a4435d14f116fe_JaffaCakes118

  • Size

    692KB

  • Sample

    240710-k64twaygkr

  • MD5

    341b77aef07a6db7a0a4435d14f116fe

  • SHA1

    8aa6a8878963ee3cf88a0dcd4b6c319f4dd41935

  • SHA256

    4052813833a832623f0954f57ddc69290c9444ad1d58fb634531dc36dc3bb92c

  • SHA512

    37e83bfe6fe0e12984e8caf8dc4ec16f27e623c1734a2530608725cc39227f0fece374471144a40d24b7ec6529b71fb44858806169b619b46bc0453501c649d1

  • SSDEEP

    12288:yYhVRuOgn9xe/ZYjQ8Sme0uAnGj97gLfjYnIqZJ9XaXCIdjLaxWQnM82:3R4n9xs2c0Nw0XxqZzQpxeA

Score
10/10
darkcometpersistencerattrojan

Malware Config

Targets

    • Target

      341b77aef07a6db7a0a4435d14f116fe_JaffaCakes118

    • Size

      692KB

    • MD5

      341b77aef07a6db7a0a4435d14f116fe

    • SHA1

      8aa6a8878963ee3cf88a0dcd4b6c319f4dd41935

    • SHA256

      4052813833a832623f0954f57ddc69290c9444ad1d58fb634531dc36dc3bb92c

    • SHA512

      37e83bfe6fe0e12984e8caf8dc4ec16f27e623c1734a2530608725cc39227f0fece374471144a40d24b7ec6529b71fb44858806169b619b46bc0453501c649d1

    • SSDEEP

      12288:yYhVRuOgn9xe/ZYjQ8Sme0uAnGj97gLfjYnIqZJ9XaXCIdjLaxWQnM82:3R4n9xs2c0Nw0XxqZzQpxeA

    Score
    10/10
    darkcometpersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks