Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 05:17
Static task
static1
Behavioral task
behavioral1
Sample
29aaac94e2edef7a8c57d4355d74598e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29aaac94e2edef7a8c57d4355d74598e.exe
Resource
win10v2004-20231215-en
General
-
Target
29aaac94e2edef7a8c57d4355d74598e.exe
-
Size
575KB
-
MD5
29aaac94e2edef7a8c57d4355d74598e
-
SHA1
6edf124b2fc715b5160e09a2eb1d92d336f5bcfd
-
SHA256
7b874a9ec6e79839129a880e9bdbd81b3e5241d65c24acb98863e4de354606fd
-
SHA512
a6b8e79b8d08ee25f35bde1911df01a7ec532b0992b223a59b66764a2c8525322f0ebda831eed5b613b0fd9ff32706d832091ee2b1175ca55ce5a9cd3f9c90a0
-
SSDEEP
12288:iC5CpXwVp3/0tWjDnDBqL7QyCedLMvlu/tZPx8MdEgJ9s:iLwVpv35yp2luL5Xd
Malware Config
Extracted
raccoon
1.7.3
31bcfc27d8b618567f214bdc9ba012927bc6bce2
-
url4cnc
https://telete.in/jdiamond13
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/4880-2-0x0000000002200000-0x0000000002293000-memory.dmp family_raccoon_v1 behavioral2/memory/4880-3-0x0000000000400000-0x00000000004AB000-memory.dmp family_raccoon_v1 behavioral2/memory/4880-4-0x0000000000400000-0x00000000004AB000-memory.dmp family_raccoon_v1 behavioral2/memory/4880-7-0x0000000002200000-0x0000000002293000-memory.dmp family_raccoon_v1