Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

43cb66688b...fN.exe

windows7-x64

10

43cb66688b...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43cb66688bfb750b12dbc3fe205e36f35c1bc4aaf863b6a93af0f71b241e659fN.exe

  • Size

    729KB

  • Sample

    241231-t26mca1pcl

  • MD5

    6f2fcf21ba49874ed0681d510d5152d0

  • SHA1

    3dea609de221de549e093017609f09968a8a5413

  • SHA256

    43cb66688bfb750b12dbc3fe205e36f35c1bc4aaf863b6a93af0f71b241e659f

  • SHA512

    2710bae37f5f290dd931555b680731af2ce440402f590f9fd4d8e2bca716798a43645d0cc75b7882f19cda96cf6ffab589b5eb28f2ba0bb5af304802c7a13326

  • SSDEEP

    12288:uLU768X1JnK+62pn/XTBeB5vpAPN5DFY+4zSsva0beWTr+YzZNQPUFhpd4oSYxlh:z68PK+BNg9GY+4pbaYNNQIpdZSgh

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      43cb66688bfb750b12dbc3fe205e36f35c1bc4aaf863b6a93af0f71b241e659fN.exe

    • Size

      729KB

    • MD5

      6f2fcf21ba49874ed0681d510d5152d0

    • SHA1

      3dea609de221de549e093017609f09968a8a5413

    • SHA256

      43cb66688bfb750b12dbc3fe205e36f35c1bc4aaf863b6a93af0f71b241e659f

    • SHA512

      2710bae37f5f290dd931555b680731af2ce440402f590f9fd4d8e2bca716798a43645d0cc75b7882f19cda96cf6ffab589b5eb28f2ba0bb5af304802c7a13326

    • SSDEEP

      12288:uLU768X1JnK+62pn/XTBeB5vpAPN5DFY+4zSsva0beWTr+YzZNQPUFhpd4oSYxlh:z68PK+BNg9GY+4pbaYNNQIpdZSgh

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks