Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc27c0a88d38ac8b30573a8868c920bf2d537fe381950a85716d15e4343254dd.exe

  • Size

    659KB

  • MD5

    8f8f755df17f3dd61a628934b055b4b9

  • SHA1

    7841cb19673e4d23fda1eda402c0f6ca6b369dad

  • SHA256

    dc27c0a88d38ac8b30573a8868c920bf2d537fe381950a85716d15e4343254dd

  • SHA512

    2f36f64c61f975c6007962f08e21eb7fef8c3030f357d86cfe3d86ca456b1b02265895cb28ca631eee3882170345bbe224d044ac63af7ae931f3d7dcd0c29771

  • SSDEEP

    12288:O9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hu:aZ1xuVVjfFoynPaVBUR8f+kN10EBU

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

46.105.250.97:1604

Mutex

DC_MUTEX-3TMAVLG

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    l152Z1g7L1AT

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc27c0a88d38ac8b30573a8868c920bf2d537fe381950a85716d15e4343254dd.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections