Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3a0c4ac73f...dc.exe

windows7-x64

10

3a0c4ac73f...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0c4ac73fba3367b8876d4019dc4ddc

  • Size

    1.0MB

  • Sample

    231231-ry9tgsaab9

  • MD5

    3a0c4ac73fba3367b8876d4019dc4ddc

  • SHA1

    198bcf513ffc1e1ae7ccb2490476374396b363e4

  • SHA256

    403fb79c97c2bb3948a866e60b9f77bc41c5dca8122df6a3ab15a0c11db71261

  • SHA512

    cf0d96406592d0461e871e591fb57bcd2ace430120dbe8a652186cb27810141e4c977bbbb6cd8b1b7a51d409b216bef3094b92719826e0d8a7f8d57766c7e981

  • SSDEEP

    12288:WKuyeacAhSTTInMfZBbEqHrPjU1MInGOObsclT+BJWmJF+c9d2QgPzkYv:XuyeacAh+0sfHJKG3b1T+DWWlQQgrkO

Score
10/10
raccoon829b8253290a33cf285fa6fea2c8437d0e687ddestealer

Malware Config

Extracted

Family

raccoon

Botnet

829b8253290a33cf285fa6fea2c8437d0e687dde

Attributes
  • url4cnc

    https://telete.in/timkamrstones

rc4.plain
rc4.plain

Targets

    • Target

      3a0c4ac73fba3367b8876d4019dc4ddc

    • Size

      1.0MB

    • MD5

      3a0c4ac73fba3367b8876d4019dc4ddc

    • SHA1

      198bcf513ffc1e1ae7ccb2490476374396b363e4

    • SHA256

      403fb79c97c2bb3948a866e60b9f77bc41c5dca8122df6a3ab15a0c11db71261

    • SHA512

      cf0d96406592d0461e871e591fb57bcd2ace430120dbe8a652186cb27810141e4c977bbbb6cd8b1b7a51d409b216bef3094b92719826e0d8a7f8d57766c7e981

    • SSDEEP

      12288:WKuyeacAhSTTInMfZBbEqHrPjU1MInGOObsclT+BJWmJF+c9d2QgPzkYv:XuyeacAh+0sfHJKG3b1T+DWWlQQgrkO

    Score
    10/10
    raccoon829b8253290a33cf285fa6fea2c8437d0e687ddestealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks