Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

a4b196e112...10.exe

windows7-x64

10

a4b196e112...10.exe

windows10-2004-x64

10

a4b196e112...10.exe

android-13-x64

a4b196e112...10.exe

android-13-x64

a4b196e112...10.exe

macos-10.15-amd64

a4b196e112...10.exe

ubuntu-18.04-amd64

a4b196e112...10.exe

debian-9-armhf

a4b196e112...10.exe

debian-9-mips

a4b196e112...10.exe

debian-9-mipsel

Resubmissions

05/02/2025, 07:18

250205-h48nyaxnbp 10

01/10/2022, 23:37

221001-3mk7jaddeq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4b196e112825232a260725c2651764ad8d2bdcc5974ee4b0a9c635c14b0eb10

  • Size

    690KB

  • MD5

    45bfee45177d62952de9c03f661c4b1a

  • SHA1

    e12804084039f235b768a21594c9e20b9ddb0d1b

  • SHA256

    a4b196e112825232a260725c2651764ad8d2bdcc5974ee4b0a9c635c14b0eb10

  • SHA512

    288247162e0cd2dca6e0d51890a70694a2ffaf0b0983f41f0048271c74af16a9eb8175c0e9f6fd91325ca93423aafd6816278e93520308ce53372e4f848f1264

  • SSDEEP

    12288:f9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h9lI:JZ1xuVVjfFoynPaVBUR8f+kN10EBW

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-7R3QTTQ

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    NPore9Jz402K

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4b196e112825232a260725c2651764ad8d2bdcc5974ee4b0a9c635c14b0eb10
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections