Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
09/12/2024, 10:19
Static task
static1
Behavioral task
behavioral1
Sample
d92038c29ec3f08c2b0a8ad7928dcabd_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
d92038c29ec3f08c2b0a8ad7928dcabd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d92038c29ec3f08c2b0a8ad7928dcabd_JaffaCakes118.exe
-
Size
619KB
-
MD5
d92038c29ec3f08c2b0a8ad7928dcabd
-
SHA1
2a446ef3e1122298f7cfedbb490fe8a06ad51047
-
SHA256
4a3c968cc4204a0eac251bf3be98f56e130b7b7693c498814f222c037165c83b
-
SHA512
7e431ab34d299db45551529b6bc698aa16e32b2a4979068e124d57c815468e51c4278a72633b2fdc354b89ddd2d567fd2d394adb0e015546932473f80d354f38
-
SSDEEP
12288:XxRhfti5cBRo/gsca21DxrDLXTxrSYn4nkA8ViEw8uV+Tv6hexhrf2wQ:X9VUcBXDxb9rSka8FbbD2w
Malware Config
Extracted
raccoon
1.7.3
c8a4bc819c641415a3c45622368953a684036cdb
-
url4cnc
https://telete.in/jjbadb0y
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral1/memory/2324-2-0x0000000003340000-0x00000000033D3000-memory.dmp family_raccoon_v1 behavioral1/memory/2324-3-0x0000000000400000-0x0000000000495000-memory.dmp family_raccoon_v1 behavioral1/memory/2324-5-0x0000000003340000-0x00000000033D3000-memory.dmp family_raccoon_v1 behavioral1/memory/2324-7-0x0000000000400000-0x0000000000495000-memory.dmp family_raccoon_v1 behavioral1/memory/2324-6-0x0000000000400000-0x0000000003338000-memory.dmp family_raccoon_v1 -
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d92038c29ec3f08c2b0a8ad7928dcabd_JaffaCakes118.exe