Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
46c9b2dbb45bb0152c48b7477d827d62.exe
-
Size
6.7MB
-
Sample
221010-19myjadfgn
-
MD5
46c9b2dbb45bb0152c48b7477d827d62
-
SHA1
7839c60ee4f321642bd8825174d3d47a7facffe4
-
SHA256
e7969bb05ced6f845e1e44adef01ad129cabca8fff70256f2dbce1a03b6b4e59
-
SHA512
43e285ec00536cd8249f626cb7c382d9e6e4cd8fd8a515795d34263953eaa60eb7c1ebf70f169785e4cff1767fc6989f4164e92977a62723ce4cec58b4a03138
-
SSDEEP
196608:y7L5ixho0BciFKHYqsv1GVnULP7Y76GQoSvifo8:A8BypAv1enK7Y2G9YiA8
Static task
static1
Behavioral task
behavioral1
Sample
46c9b2dbb45bb0152c48b7477d827d62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46c9b2dbb45bb0152c48b7477d827d62.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
raccoon
e10a3ab78165c8b55a0e79cd632b9439
http://45.67.35.251/
Targets
-
-
Target
46c9b2dbb45bb0152c48b7477d827d62.exe
-
Size
6.7MB
-
MD5
46c9b2dbb45bb0152c48b7477d827d62
-
SHA1
7839c60ee4f321642bd8825174d3d47a7facffe4
-
SHA256
e7969bb05ced6f845e1e44adef01ad129cabca8fff70256f2dbce1a03b6b4e59
-
SHA512
43e285ec00536cd8249f626cb7c382d9e6e4cd8fd8a515795d34263953eaa60eb7c1ebf70f169785e4cff1767fc6989f4164e92977a62723ce4cec58b4a03138
-
SSDEEP
196608:y7L5ixho0BciFKHYqsv1GVnULP7Y76GQoSvifo8:A8BypAv1enK7Y2G9YiA8
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-