Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
182s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03/04/2024, 03:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9e51c3b7d2cdb72dc430322318ff8a3d_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
9e51c3b7d2cdb72dc430322318ff8a3d_JaffaCakes118.exe
-
Size
582KB
-
MD5
9e51c3b7d2cdb72dc430322318ff8a3d
-
SHA1
e9f32c599517f041869e4e4137c98b80d45fcc82
-
SHA256
3026c89e851c9c6302725d3458e7ac4d398117404002987d785597df5a3cc124
-
SHA512
f47bc426571a5ab5e08bd75f9ed59c445716219151c7b553dd08d6f74e25c321fb832c067c6a633de22b7e1a89a6d247df47ec219eda3b2f3da47d5e75cf0854
-
SSDEEP
12288:Vx6/K6TsiuzMNX1fzeRVKxeO8udG1oS06KwHHghfZpt/Zr4r1T/qXSmIBr:Vx6/zsXYXAPucrywngnpQ1T/qm
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral2/memory/3516-2-0x00000000023E0000-0x000000000246E000-memory.dmp family_raccoon_v1 behavioral2/memory/3516-3-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1 behavioral2/memory/3516-4-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1 behavioral2/memory/3516-7-0x00000000023E0000-0x000000000246E000-memory.dmp family_raccoon_v1 behavioral2/memory/3516-13-0x0000000000400000-0x00000000007C3000-memory.dmp family_raccoon_v1