Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d73deeb57e...18.exe

windows7-x64

10

d73deeb57e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d73deeb57ea83ac6bf26c82e410e6206_JaffaCakes118

  • Size

    351KB

  • MD5

    d73deeb57ea83ac6bf26c82e410e6206

  • SHA1

    bbb303783e535b78f57e70150a5d3567fb4b754e

  • SHA256

    9c0976f4ddd64f3dfd4ef45e639e7878407d09de0f449688c445d86788afdc2b

  • SHA512

    15e74a47dae317301fed4ca068ba97a5b3f1d11cc91cbf9e6665048552c980fbe7e8c6cd8b1c96fb090e4e675dbc34281ef052d653a181de61ef4d9ff0ee0d4f

  • SSDEEP

    6144:gD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZrm:gl8E4w5huat7UovONzbXwf

Score
10/10
upxhozkinzpoopdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

HoZKiNZPooP

C2

herro4chan.zapto.org:2894

192.162.102.160:2894
Mutex

DC_MUTEX-7GYE6G4

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    9xTUTcl355dw

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d73deeb57ea83ac6bf26c82e410e6206_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.