Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...c9.exe

windows7-x64

10

JaffaCakes...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_849d55f4fabb029ec88eb5a6c3288bc9

  • Size

    658KB

  • Sample

    250321-y5eegsyvax

  • MD5

    849d55f4fabb029ec88eb5a6c3288bc9

  • SHA1

    2dd0c16d793007af0fd2a6d5a057f1042fe8c0f0

  • SHA256

    bd70b6884c3dcc33991ea755b375e21ea6f1ea522322c10d39589f9226a35034

  • SHA512

    0f858b89a91dae2d49d66d5d997d20cf40393d5ffdd05d8944833ca47a9b51203e5fd2db43cb77658fa85ff9f222032a3873a51ffc8658ce78f50e476029933c

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hF:uZ1xuVVjfFoynPaVBUR8f+kN10EBP

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

hunter51.no-ip.biz:1604

Mutex

DC_MUTEX-LMEK6UT

Attributes
  • gencode

    tyloGxSlSl3n

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_849d55f4fabb029ec88eb5a6c3288bc9

    • Size

      658KB

    • MD5

      849d55f4fabb029ec88eb5a6c3288bc9

    • SHA1

      2dd0c16d793007af0fd2a6d5a057f1042fe8c0f0

    • SHA256

      bd70b6884c3dcc33991ea755b375e21ea6f1ea522322c10d39589f9226a35034

    • SHA512

      0f858b89a91dae2d49d66d5d997d20cf40393d5ffdd05d8944833ca47a9b51203e5fd2db43cb77658fa85ff9f222032a3873a51ffc8658ce78f50e476029933c

    • SSDEEP

      12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hF:uZ1xuVVjfFoynPaVBUR8f+kN10EBP

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks