Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...90.exe

windows7-x64

10

JaffaCakes...90.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_617c0618203542d377000e452828f790

  • Size

    952KB

  • Sample

    250102-ahxqjsslgx

  • MD5

    617c0618203542d377000e452828f790

  • SHA1

    79a66972ca16b3b43723e26aaf1701a36668746e

  • SHA256

    ca8fe5d792569f5e866d1a5b173de5fc9158b4e597e416fab89600abd7ac485c

  • SHA512

    eead965c2929d0b52cf823d7d08ce9c16c2ab4bcd579236266f0d2695060c2c4c6c6d310e9b82746436fc04d69c78d70caff0edebd72be272091ad1490857ec1

  • SSDEEP

    12288:byyy7Z3z4I8NXOGjwwG/ZjXsAHHz79p9NM5Tz103j2CF4TxQUOfhVPOSAE//VAci:baCI2OewFJN4mkxyHnnew1SatLRzD

Score
10/10
darkcometdiscoverypersistencerattrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_617c0618203542d377000e452828f790

    • Size

      952KB

    • MD5

      617c0618203542d377000e452828f790

    • SHA1

      79a66972ca16b3b43723e26aaf1701a36668746e

    • SHA256

      ca8fe5d792569f5e866d1a5b173de5fc9158b4e597e416fab89600abd7ac485c

    • SHA512

      eead965c2929d0b52cf823d7d08ce9c16c2ab4bcd579236266f0d2695060c2c4c6c6d310e9b82746436fc04d69c78d70caff0edebd72be272091ad1490857ec1

    • SSDEEP

      12288:byyy7Z3z4I8NXOGjwwG/ZjXsAHHz79p9NM5Tz103j2CF4TxQUOfhVPOSAE//VAci:baCI2OewFJN4mkxyHnnew1SatLRzD

    Score
    10/10
    darkcometdiscoverypersistencerattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks