Analysis
- max time kernel
150s - max time network
152s - platform
windows10_x64 - resource
win10v20210410 - submitted
02/08/2021, 20:56
Static task
static1
Behavioral task
behavioral1
Sample
707E2E40D4A958D1A2612DD11A442E2E.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
707E2E40D4A958D1A2612DD11A442E2E.exe
Resource
win10v20210410
0 signatures
0 seconds
General
- Target 707E2E40D4A958D1A2612DD11A442E2E.exe
- Size 497KB
- Sample210802-gdcxnasq7e
- SHA256 1d7c32fbb0d4f6fa794e0dfd1e50396e0e90d5a6d776110037084908c721a835
- MD5 707e2e40d4a958d1a2612dd11a442e2e
- SHA1 0c796bb7eefb29ea4fd24d33dd0c17faf6d2c347
- SHA512 ce67aa7654e6a63dd23b442cd384b76ba26d7892c82c1d71efe1699b8f41e84ecc3edfb55d30f8e71c0c2163c9ae290e7c4206703726ed2f3b418cda904b8f22
- MD5 SHA1 SHA512
Malware Config
Extracted
Family
-
raccoon
Botnet
-
4c8e1681460d5b99232cf3ee6471b51e7d263fb0
Attributes
-
url4cnc
https://telete.in/jdiamond13
rc4.plain
rc4.plain
Signatures
- Raccoon Stealer Payload 2 IoCs
resource yara_rule behavioral2/memory/2752-114-0x0000000002090000-0x0000000002123000-memory.dmp family_raccoon behavioral2/memory/2752-115-0x0000000000400000-0x0000000000497000-memory.dmp family_raccoon