Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/03/2024, 16:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dfa8a3cee477e6dd764c28a8a3a78e4d.exe
Resource
win7-20240221-en
3 signatures
150 seconds
General
-
Target
dfa8a3cee477e6dd764c28a8a3a78e4d.exe
-
Size
514KB
-
MD5
dfa8a3cee477e6dd764c28a8a3a78e4d
-
SHA1
005e2358456d388a25e8e79d2585623f7ae5fda7
-
SHA256
7fa8300652f1b8c48e6ac25203994e388acb14ffc29393da5175de05ec1614d8
-
SHA512
27ea05693e815c7a1cfec3cf129e94609720b96e2a9a88ce29def489d89f40255f86dea253e5da12df5041055e87fd43f2bda92359c12c49b29f7745cdf7a115
-
SSDEEP
12288:NKdKp+OO13LX9vdmEYUePlT9HL2qvdHMe8OXCxAveJBysPjsLk:NH+h3LFdZYlT4qvZXCS2JBpLs
Malware Config
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/456-2-0x00000000022F0000-0x0000000002381000-memory.dmp family_raccoon_v1 behavioral2/memory/456-3-0x0000000000400000-0x0000000000505000-memory.dmp family_raccoon_v1 behavioral2/memory/456-4-0x0000000000400000-0x0000000000505000-memory.dmp family_raccoon_v1 behavioral2/memory/456-7-0x00000000022F0000-0x0000000002381000-memory.dmp family_raccoon_v1