Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    160s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 04:21

General

  • Target

    27f0c1204176dc2de1dee0d121885b6f.exe

  • Size

    593KB

  • MD5

    27f0c1204176dc2de1dee0d121885b6f

  • SHA1

    4ae8b4fd2b2528adebf7665d0cd7ae9c31815306

  • SHA256

    a885750647186185080fe25991ad4e49e67d2651041fc14e5dae4fc222840e78

  • SHA512

    02e0735273e95804e7cc36ba46a34fcf89b52e5dfdd50091b022410a07c7772eb1b9cf9beb38695e5514887103d0e034ccf851f9a27af0a1a16d7c9d0d2fe424

  • SSDEEP

    12288:3gdoE/PhrjUs2jQyxBp8ruNjRlMN5bqmXV4tA+YI:QdoO720yF8r8C5Wm+t

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27f0c1204176dc2de1dee0d121885b6f.exe
    "C:\Users\Admin\AppData\Local\Temp\27f0c1204176dc2de1dee0d121885b6f.exe"
    1⤵
      PID:4424

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4424-1-0x0000000003290000-0x0000000003390000-memory.dmp

      Filesize

      1024KB

    • memory/4424-2-0x0000000004E90000-0x0000000004F23000-memory.dmp

      Filesize

      588KB

    • memory/4424-3-0x0000000000400000-0x0000000003290000-memory.dmp

      Filesize

      46.6MB

    • memory/4424-4-0x0000000000400000-0x0000000003290000-memory.dmp

      Filesize

      46.6MB

    • memory/4424-6-0x0000000003290000-0x0000000003390000-memory.dmp

      Filesize

      1024KB

    • memory/4424-7-0x0000000004E90000-0x0000000004F23000-memory.dmp

      Filesize

      588KB