Analysis
- max time kernel
152s - max time network
159s - platform
windows10_x64 - resource
win10v20210408 - submitted
03/09/2021, 03:27
Static task
static1
Behavioral task
behavioral1
Sample
4AE2121A59907625840DFC680841ABDD1CBB1646F0E46.exe
Resource
win7-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4AE2121A59907625840DFC680841ABDD1CBB1646F0E46.exe
Resource
win10v20210408
0 signatures
0 seconds
General
- Target 4AE2121A59907625840DFC680841ABDD1CBB1646F0E46.exe
- Size 594KB
- Sample210903-dzrseacaa4
- SHA256 4ae2121a59907625840dfc680841abdd1cbb1646f0e46f3078b8f4e7d55f3d8e
- MD5 f0af15a2314afee90871fe75a1faa3a3
- SHA1 58a9d3200daf1b04a72c730b9a93b22b94bf5e25
- SHA512 678abd85f55f68bb559182784c0c10d531bb8a2401606f22768c10eab36a36a36a46bf8de652305450dd57d84a84d4812b51adfb09857883995c2f4a2a476045
- MD5 SHA1 SHA512
Malware Config
Extracted
Family
-
raccoon
Botnet
-
19a5107c14ad55a422854fc2b5446470e346ef69
Attributes
-
url4cnc
https://tttttt.me/jredmankun
rc4.plain
rc4.plain
Signatures
- Raccoon Stealer Payload 2 IoCs
resource yara_rule behavioral2/memory/808-114-0x0000000004EC0000-0x0000000004F51000-memory.dmp family_raccoon behavioral2/memory/808-115-0x0000000000400000-0x0000000003282000-memory.dmp family_raccoon