Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
160s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 04:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
27f0c1204176dc2de1dee0d121885b6f.exe
Resource
win7-20231215-en
3 signatures
150 seconds
General
-
Target
27f0c1204176dc2de1dee0d121885b6f.exe
-
Size
593KB
-
MD5
27f0c1204176dc2de1dee0d121885b6f
-
SHA1
4ae8b4fd2b2528adebf7665d0cd7ae9c31815306
-
SHA256
a885750647186185080fe25991ad4e49e67d2651041fc14e5dae4fc222840e78
-
SHA512
02e0735273e95804e7cc36ba46a34fcf89b52e5dfdd50091b022410a07c7772eb1b9cf9beb38695e5514887103d0e034ccf851f9a27af0a1a16d7c9d0d2fe424
-
SSDEEP
12288:3gdoE/PhrjUs2jQyxBp8ruNjRlMN5bqmXV4tA+YI:QdoO720yF8r8C5Wm+t
Malware Config
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/4424-2-0x0000000004E90000-0x0000000004F23000-memory.dmp family_raccoon_v1 behavioral2/memory/4424-3-0x0000000000400000-0x0000000003290000-memory.dmp family_raccoon_v1 behavioral2/memory/4424-4-0x0000000000400000-0x0000000003290000-memory.dmp family_raccoon_v1 behavioral2/memory/4424-7-0x0000000004E90000-0x0000000004F23000-memory.dmp family_raccoon_v1