Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03/04/2024, 05:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a136512221d589505f4a0741f278c3f6_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
a136512221d589505f4a0741f278c3f6_JaffaCakes118.exe
-
Size
561KB
-
MD5
a136512221d589505f4a0741f278c3f6
-
SHA1
c71dc0551450a97798c05a08887fdd1330ed6ba6
-
SHA256
bc2bf5271de321e19fa21bae29bcf1260b2e43c8891ab056881f37a1209d8557
-
SHA512
493fcd26677723965386f85738de05f407a510784349393f3c80a9fbbde38c98db477678cd9941fd7dff714c0c46cb49e8400f8bc52942757900ff085c87aa1b
-
SSDEEP
12288:O4GwnA+8NYzXvs4Bb2FM1CbFBKmpaSqBX2s:O41A+8sGFJKmMV2
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral2/memory/3444-2-0x0000000003440000-0x00000000034CE000-memory.dmp family_raccoon_v1 behavioral2/memory/3444-3-0x0000000000400000-0x00000000016FF000-memory.dmp family_raccoon_v1 behavioral2/memory/3444-4-0x0000000000400000-0x00000000016FF000-memory.dmp family_raccoon_v1 behavioral2/memory/3444-7-0x0000000003440000-0x00000000034CE000-memory.dmp family_raccoon_v1 behavioral2/memory/3444-13-0x0000000000400000-0x00000000016FF000-memory.dmp family_raccoon_v1