Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_8a7a657707cb1e6fdd0c87e53d368c04137986bdcb75719cec005d78ff182b0f

  • Size

    730.7MB

  • Sample

    241230-x4vveavlgr

  • MD5

    7c03e652aeddf56d592158eb53bf91c0

  • SHA1

    977417ae633d2d51be200c9ddf6d6057b99509f0

  • SHA256

    8a7a657707cb1e6fdd0c87e53d368c04137986bdcb75719cec005d78ff182b0f

  • SHA512

    fe4ff804e417bdf73bf1a2e507ff11ca6730d532e7003cd536efb4a4d4033df3c232f9201d901ac32a0dfaa19fbc5b211a1d6d5e40250c65560f83e24ec1de55

  • SSDEEP

    196608:g09MwekVrPgXplkEZrWHg1mG9aAncV27jPEGerTn6PYNfjWre4iLBo6i/eVAz+2a:n9fbZEZrWAD9e07jPEPTRjWX6r9ko9

Malware Config

Extracted

Family

raccoon

Botnet

c827bbf17c1606fd383054eceed28695

C2

http://95.216.153.86/

http://5.75.159.229/

http://212.113.119.153/

http://78.153.130.123/

Attributes
  • user_agent

    AYAYAYAY1337

xor.plain

Targets

    • Target

      JaffaCakes118_8a7a657707cb1e6fdd0c87e53d368c04137986bdcb75719cec005d78ff182b0f

    • Size

      730.7MB

    • MD5

      7c03e652aeddf56d592158eb53bf91c0

    • SHA1

      977417ae633d2d51be200c9ddf6d6057b99509f0

    • SHA256

      8a7a657707cb1e6fdd0c87e53d368c04137986bdcb75719cec005d78ff182b0f

    • SHA512

      fe4ff804e417bdf73bf1a2e507ff11ca6730d532e7003cd536efb4a4d4033df3c232f9201d901ac32a0dfaa19fbc5b211a1d6d5e40250c65560f83e24ec1de55

    • SSDEEP

      196608:g09MwekVrPgXplkEZrWHg1mG9aAncV27jPEGerTn6PYNfjWre4iLBo6i/eVAz+2a:n9fbZEZrWAD9e07jPEPTRjWX6r9ko9

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks