Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/04/2024, 08:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6cd1121dace05f1d0be18677fa2ce0eb_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
6cd1121dace05f1d0be18677fa2ce0eb_JaffaCakes118.exe
-
Size
582KB
-
MD5
6cd1121dace05f1d0be18677fa2ce0eb
-
SHA1
478124dc23be88556c52c36e6622f8500d2e5dca
-
SHA256
e128f0a54c481a677c0cdc5159600956776cc02fe066cec67775958e4d132ee9
-
SHA512
ce9cf6ff274a33da2e41233e4bfa2435030e3ee7758acfd4226830ab09b1001c38570f85a3045877790a5e64b3e36d877f88e04519fcf462f4efe6d01af5e0ad
-
SSDEEP
12288:MpSPnwWMHBMYp6Tkw/4eIJWN3T5rKOSrSgeM3p4hmB2:MEw2Y0rjIJWNdrieM3p8
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral1/memory/1540-2-0x00000000007D0000-0x000000000085E000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-3-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-4-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-7-0x00000000007D0000-0x000000000085E000-memory.dmp family_raccoon_v1 behavioral1/memory/1540-16-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1