Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    267a8025581b5df1e5ec7c63b6d09794698cde8bbcc430786b68301713a36c78N.exe

  • Size

    658KB

  • MD5

    0c1900161557183e9e34109a1e8f1e50

  • SHA1

    1525a1274d4d2953ea1577ef3dc26f0e208c4748

  • SHA256

    267a8025581b5df1e5ec7c63b6d09794698cde8bbcc430786b68301713a36c78

  • SHA512

    df853cc0ea70b43c3c641302bb92855f57a159ba067a95f11ff88e5e33e72d19149b9a881e0e6f2d42722287dd0132cf0d84a37d08805e4e304581a9e0206b95

  • SSDEEP

    12288:+9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hX:KZ1xuVVjfFoynPaVBUR8f+kN10EBN

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

aytugay123.duckdns.org:63

Mutex

DC_MUTEX-HAPDWK7

Attributes
  • InstallPath

    Windows Updater

  • gencode

    Ztwp6aCBwPiM

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    CS:GO

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 267a8025581b5df1e5ec7c63b6d09794698cde8bbcc430786b68301713a36c78N.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections