Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

001.exe

windows7_x64

10

001.exe

windows10-2004_x64

10

1488.exe

windows7_x64

10

1488.exe

windows10-2004_x64

1

1_cr.exe

windows7_x64

5

1_cr.exe

windows10-2004_x64

4

1cr.exe

windows7_x64

10

1cr.exe

windows10-2004_x64

4

1fc2d.exe

windows7_x64

10

1fc2d.exe

windows10-2004_x64

10

6e7_2021-0...04.exe

windows7_x64

10

6e7_2021-0...04.exe

windows10-2004_x64

10

Abjects.exe

windows7_x64

1

Abjects.exe

windows10-2004_x64

4

BattleText.exe

windows7_x64

10

BattleText.exe

windows10-2004_x64

1

HANS.exe

windows7_x64

3

HANS.exe

windows10-2004_x64

1

Hulu.exe

windows7_x64

8

Hulu.exe

windows10-2004_x64

8

IntelFIVE.exe

windows7_x64

3

IntelFIVE.exe

windows10-2004_x64

7

IntelFOUR.exe

windows7_x64

3

IntelFOUR.exe

windows10-2004_x64

7

IntelONE.exe

windows7_x64

3

IntelONE.exe

windows10-2004_x64

7

IntelTHREE.exe

windows7_x64

3

IntelTHREE.exe

windows10-2004_x64

7

IntelTWO.exe

windows7_x64

3

IntelTWO.exe

windows10-2004_x64

7

Lucky_Fixed.exe

windows7_x64

3

Lucky_Fixed.exe

windows10-2004_x64

10

Resubmissions

07/02/2022, 00:34

220207-aw81qsdce2 10

Analysis

  • max time kernel
    169s
  • max time network
    194s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    07/02/2022, 00:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6e7_2021-01-19_18-04.exe

  • Size

    509KB

  • MD5

    d4827f2bb4c0446d1bba5df00c2436b8

  • SHA1

    69db7a9dd71235671819472bf2d55bb3eeaf11ea

  • SHA256

    235e42b187151383ebb91cb85af8500f19e18906bf57917fcf9e0da7004c86ff

  • SHA512

    9c3429767a76dfcaeaf6bc1b032d71ddb04a6d7f2956eb390cde050e5965fc0e8d2affb3b31061307f76f68c9c0e90e7f3908a73081c044ff89de88ff92307a5

Score
10/10
raccoonc6a0bbe2ae5d9a25bd8b22a8b362127290c5e84astealer

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

c6a0bbe2ae5d9a25bd8b22a8b362127290c5e84a

Attributes
  • url4cnc

    https://telete.in/h_royal_1

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon
  • Raccoon Stealer Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6e7_2021-01-19_18-04.exe
    "C:\Users\Admin\AppData\Local\Temp\6e7_2021-01-19_18-04.exe"
    1⤵
      PID:1128

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1128-54-0x0000000004750000-0x00000000047BA000-memory.dmp

      Filesize

      424KB

      Download

    • memory/1128-55-0x0000000075601000-0x0000000075603000-memory.dmp

      Filesize

      8KB

      Download

    • memory/1128-56-0x0000000000220000-0x00000000002B2000-memory.dmp

      Filesize

      584KB

      Download

    • memory/1128-57-0x0000000000400000-0x0000000004634000-memory.dmp

      Filesize

      66.2MB

      Download