Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...ec.exe

windows7-x64

10

JaffaCakes...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8433061c4fa1630b1102b3e9107555ec

  • Size

    811KB

  • Sample

    250321-wkxzzsvtgv

  • MD5

    8433061c4fa1630b1102b3e9107555ec

  • SHA1

    39ed66ddedf2a857ec55b16f41ed694a7b7d8331

  • SHA256

    1171f232014ec07835d22b05d1c10fc464c8d45afa9bfd1759a409923277e664

  • SHA512

    e86691e197c5a80d8b8500f790604b84b3a841634e4025b5d6f8164cedf1861559bbe230f51c570e6b5101b487a2291334085893cbc7f8a8868a12962cbe1ced

  • SSDEEP

    24576:DwkwVmNW9lBNQ5Ni8rb1Su20Mx8PwX2W77b:DwkM0W9VQ5NbrRS6Ml2W7P

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-7S1ZJ4J

Attributes
  • gencode

    5FNvw7Zm25rL

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_8433061c4fa1630b1102b3e9107555ec

    • Size

      811KB

    • MD5

      8433061c4fa1630b1102b3e9107555ec

    • SHA1

      39ed66ddedf2a857ec55b16f41ed694a7b7d8331

    • SHA256

      1171f232014ec07835d22b05d1c10fc464c8d45afa9bfd1759a409923277e664

    • SHA512

      e86691e197c5a80d8b8500f790604b84b3a841634e4025b5d6f8164cedf1861559bbe230f51c570e6b5101b487a2291334085893cbc7f8a8868a12962cbe1ced

    • SSDEEP

      24576:DwkwVmNW9lBNQ5Ni8rb1Su20Mx8PwX2W77b:DwkM0W9VQ5NbrRS6Ml2W7P

    Score
    10/10
    darkcometguest16discoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks