Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cb58c5a6ea...98.exe

windows7-x64

10

cb58c5a6ea...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798.exe

  • Size

    349KB

  • MD5

    6e2bfe3d23cdca6de5e1dcb176d7f6df

  • SHA1

    dc1b58ba6fbcb0ccf54756e3b88dc58588330d38

  • SHA256

    cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798

  • SHA512

    0bbac9d4a81f3f605c6b2457e8ef13acae1fcf202d00817a8d1dab23b52189ed0f84aa1f8c3c63ab8fed7885826627f8351e07c2ea64ea75d9c66e00a2f8aa9c

  • SSDEEP

    6144:FcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL3771BLLjMdWnpQZh9h4n:FcW7KEZlPzCy37hlMd0QZh9un

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

anonymous666.no-ip.biz:1604

Mutex

DC_MUTEX-VYGS8LY

Attributes
  • gencode

    NMdo6eieyGsM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections