Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 09:43

General

  • Target

    14d150843722630bc9222108a89db87f.exe

  • Size

    492KB

  • MD5

    14d150843722630bc9222108a89db87f

  • SHA1

    af6e7dbe56399207ee35f62153f45f1c3df112f1

  • SHA256

    fb0c7b5f987b4224134d48b37bde3dad7fe4538f660d3d461aa470c6aa18e4ec

  • SHA512

    0050860cca81b92f3f9252821243e04d2b51ee43855e5c260158cb4f7b70f99e185211eba3eae7aaf8292635433e54478f1d04ab44335b83c35b67c7dd828c99

  • SSDEEP

    12288:RWi++HEE98iTKJ0rA/iuBlnTg+8k9WQENv1Hc9c:RNn9X2f/ieU+8kQ9vZ

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\14d150843722630bc9222108a89db87f.exe
    "C:\Users\Admin\AppData\Local\Temp\14d150843722630bc9222108a89db87f.exe"
    1⤵
    • Modifies system certificate store
    PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2948-1-0x0000000001F40000-0x0000000002040000-memory.dmp

    Filesize

    1024KB

  • memory/2948-2-0x0000000000270000-0x00000000002FF000-memory.dmp

    Filesize

    572KB

  • memory/2948-3-0x0000000000400000-0x0000000001DC8000-memory.dmp

    Filesize

    25.8MB

  • memory/2948-6-0x0000000001F40000-0x0000000002040000-memory.dmp

    Filesize

    1024KB

  • memory/2948-7-0x0000000000270000-0x00000000002FF000-memory.dmp

    Filesize

    572KB