Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

Software.exe

windows7-x64

10

Software.exe

windows10-2004-x64

10

langs/Hungarian.ps1

windows7-x64

1

langs/Hungarian.ps1

windows10-2004-x64

1

langs/Korean.ps1

windows7-x64

1

langs/Korean.ps1

windows10-2004-x64

1

Resubmissions

13/01/2023, 11:41

230113-nthbwsgf38 10

12/01/2023, 16:59

230112-vhc2csgg84 5

11/01/2023, 18:21

230111-wzsntahf31 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Active_Version_Use_2023_As_Passw0rd.rar

  • Size

    2.0MB

  • Sample

    230113-nthbwsgf38

  • MD5

    6dddb97e5d206d786787c41775f10255

  • SHA1

    5d56bacb76e6dc9ae2e4dab04d630f568b4846df

  • SHA256

    fea56667376b74c28c7de850800fb6d3aa1d0c1984106a02b7124d86ec7a7080

  • SHA512

    30783c2b3e8206c64eb67a3fcbb02933672cfe790b83802975e782a7c07c109bf12c6b999148bafdfc9f65d5d6656f6a78466128aec48afb273c149276bc4c4b

  • SSDEEP

    49152:4TEwd0xUzr/Ltpd9QLpR1W2tRYThMRo9Gks6nWhMWBuyGI3LJU15Ed1w1u:4TEEUuPh031XKhMM/3nWtBTGqy5Ezw0

Score
10/10
raccoone7d2fe83ae36b0e93e2735b36e2f6292stealer

Malware Config

Extracted

Family

raccoon

Botnet

e7d2fe83ae36b0e93e2735b36e2f6292

C2

http://94.131.98.89/

rc4.plain

Targets

    • Target

      Software.exe

    • Size

      449.2MB

    • MD5

      d5f6325ec94040f2a6ad638378f68863

    • SHA1

      b577eebec521d0c252426ce01d0a85e405619e84

    • SHA256

      87c7a6eb8d9ec5de571f3f3283d2b5f857d2eb9a262ccb11d9cbae9da8b649af

    • SHA512

      9da7cb47b04618d05c0477656c82f500080e6b4325eefe5f4d87d3d11a171fcbcfe830b676e419961378217be2c9a93040c361ae30c62de1a39d76e921bb06eb

    • SSDEEP

      24576:Rgh/xuMApac4x8buUjQs5nyyx+NxEyaQ:ih/rApz4xauUMs5nyC+NqyaQ

    Score
    10/10
    raccoone7d2fe83ae36b0e93e2735b36e2f6292stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      langs/Hungarian.ini

    • Size

      107KB

    • MD5

      7591df7fae4342cbc7a0706e1b28e87b

    • SHA1

      825e88ad498e8713522f5aef3b21ee01d6fa8b41

    • SHA256

      fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d

    • SHA512

      8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4

    • SSDEEP

      3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X

    Score
    1/10
    behavioral3behavioral4

    • Target

      langs/Korean.ini

    • Size

      91KB

    • MD5

      efae0c78be2abe2920c78b9d4785ab45

    • SHA1

      8c0799fb68852cb071bbe260deb4ab357bd5f4ed

    • SHA256

      ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132

    • SHA512

      44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8

    • SSDEEP

      768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks