Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b7f6703171...aN.exe

windows7-x64

10

b7f6703171...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7f6703171a25e9a1ff65c5f61311b7bb8b09c37a8ca5f0a3e86565889d2f72aN.exe

  • Size

    349KB

  • MD5

    7733e19cc3d50d4181aedce1ad94f860

  • SHA1

    f3357f957d0198ac2444dac784bbbb8c177e8f7c

  • SHA256

    b7f6703171a25e9a1ff65c5f61311b7bb8b09c37a8ca5f0a3e86565889d2f72a

  • SHA512

    ecfe79c4a1153fee05007512aa8d05d806460031f1e5ca44339787ddca62c54a7c812680a2dd0a6854f1f8447019e6817dfc3af00f4a25352c81ef0c208d8901

  • SSDEEP

    6144:FcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL3771BLLjMdWnpQZh9h4:FcW7KEZlPzCy37hlMd0QZh9u

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

anonymous666.no-ip.biz:1604

Mutex

DC_MUTEX-VYGS8LY

Attributes
  • gencode

    NMdo6eieyGsM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b7f6703171a25e9a1ff65c5f61311b7bb8b09c37a8ca5f0a3e86565889d2f72aN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.