Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
31/03/2024, 06:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4f1e8a41c4d75665796f66eeb13e9922_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
4f1e8a41c4d75665796f66eeb13e9922_JaffaCakes118.exe
-
Size
511KB
-
MD5
4f1e8a41c4d75665796f66eeb13e9922
-
SHA1
f92aaf9d344dec6e0b99bc5c39f4d146db6b8ce1
-
SHA256
08da5cf46e7f11c5b3d86501fd09f2df5b0c855c35d5b8b075fb5b3d173eead4
-
SHA512
2a7142d9fe826df1a39b853ee57d776851d37ce02904d773802a013505e56d3afe6b44d3d2a335557a9a69e3f4e1929a29f5cad590e9a2945c99efaf6e4f38f9
-
SSDEEP
12288:d6tT4zQLiHThSTxcOmCCa3FjlTSuHtTAtW:8tEzvkTSOztvftB
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral2/memory/1444-2-0x0000000002460000-0x00000000024EE000-memory.dmp family_raccoon_v1 behavioral2/memory/1444-3-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1 behavioral2/memory/1444-4-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1 behavioral2/memory/1444-7-0x0000000002460000-0x00000000024EE000-memory.dmp family_raccoon_v1 behavioral2/memory/1444-13-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1