Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    02/08/2021, 20:56

General

  • Target
    707E2E40D4A958D1A2612DD11A442E2E.exe
  • Size 497KB
  • Sample210802-gdcxnasq7e
  • SHA256 1d7c32fbb0d4f6fa794e0dfd1e50396e0e90d5a6d776110037084908c721a835
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 4c8e1681460d5b99232cf3ee6471b51e7d263fb0

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

  • Raccoon Stealer Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\707E2E40D4A958D1A2612DD11A442E2E.exe
    "C:\Users\Admin\AppData\Local\Temp\707E2E40D4A958D1A2612DD11A442E2E.exe"
    1⤵
      PID:2752

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/2752-114-0x0000000002090000-0x0000000002123000-memory.dmp

          memory/2752-115-0x0000000000400000-0x0000000000497000-memory.dmp