Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/03/2024, 06:04

General

  • Target

    4f1e8a41c4d75665796f66eeb13e9922_JaffaCakes118.exe

  • Size

    511KB

  • MD5

    4f1e8a41c4d75665796f66eeb13e9922

  • SHA1

    f92aaf9d344dec6e0b99bc5c39f4d146db6b8ce1

  • SHA256

    08da5cf46e7f11c5b3d86501fd09f2df5b0c855c35d5b8b075fb5b3d173eead4

  • SHA512

    2a7142d9fe826df1a39b853ee57d776851d37ce02904d773802a013505e56d3afe6b44d3d2a335557a9a69e3f4e1929a29f5cad590e9a2945c99efaf6e4f38f9

  • SSDEEP

    12288:d6tT4zQLiHThSTxcOmCCa3FjlTSuHtTAtW:8tEzvkTSOztvftB

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4f1e8a41c4d75665796f66eeb13e9922_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4f1e8a41c4d75665796f66eeb13e9922_JaffaCakes118.exe"
    1⤵
      PID:1444

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1444-1-0x0000000000870000-0x0000000000970000-memory.dmp

      Filesize

      1024KB

    • memory/1444-2-0x0000000002460000-0x00000000024EE000-memory.dmp

      Filesize

      568KB

    • memory/1444-3-0x0000000000400000-0x00000000007B2000-memory.dmp

      Filesize

      3.7MB

    • memory/1444-4-0x0000000000400000-0x00000000007B2000-memory.dmp

      Filesize

      3.7MB

    • memory/1444-6-0x0000000000870000-0x0000000000970000-memory.dmp

      Filesize

      1024KB

    • memory/1444-7-0x0000000002460000-0x00000000024EE000-memory.dmp

      Filesize

      568KB

    • memory/1444-13-0x0000000000400000-0x00000000007B2000-memory.dmp

      Filesize

      3.7MB