Analysis
- max time kernel
153s - max time network
155s - platform
windows10_x64 - resource
win10v20210410 - submitted
13/08/2021, 15:48
Static task
static1
Behavioral task
behavioral1
Sample
7432b2f25812d8ff9b52138fa7e18fe2.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7432b2f25812d8ff9b52138fa7e18fe2.exe
Resource
win10v20210410
0 signatures
0 seconds
General
- Target 7432b2f25812d8ff9b52138fa7e18fe2.exe
- Size 511KB
- Sample210813-d99d6y7whe
- SHA256 2a82f1c170fb47e3b925e6bb1b09d8b1c44b8d37692b81aafe44afd7c3c7d3cb
- MD5 7432b2f25812d8ff9b52138fa7e18fe2
- SHA1 685c712ff380c405e9e4606b463f24f60e3a89f9
- SHA512 8024dfa02b67ca1100515784058ba81950af09702b06728ac63b4eca4113af72b45f109ac57377aac57b0f90f7c76f2adb4ae8a7f77375e6a64e08df40108713
- MD5 SHA1 SHA512
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5f9dc4ba0bfbf6713c21b0fa5af7d17644daf751
Attributes
-
url4cnc
https://t.me/ogaolittlebro2
rc4.plain
rc4.plain
Signatures
- Raccoon Stealer Payload 2 IoCs
resource yara_rule behavioral2/memory/3692-114-0x00000000048E0000-0x0000000004973000-memory.dmp family_raccoon behavioral2/memory/3692-115-0x0000000000400000-0x0000000002CB6000-memory.dmp family_raccoon