Overview

overview

10

Static

static

usfive_202...18.exe

windows7_x64

10

usfive_202...18.exe

windows10_x64

10

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10-en-20210920
  • submitted
    26-09-2021 11:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    usfive_20210917-190718.exe

  • Size

    500KB

  • MD5

    0f8d15dfb267ec8601d2322489b0bb96

  • SHA1

    4594d12941ed6b746592312d5c20f7b7da2aff24

  • SHA256

    921b80f62c533d67b837204af3cc01230befed2217cfb9653a9997bdf4de3add

  • SHA512

    0b298ac39b9c45d28ea999280904574b79b3a3eb318adf5caafb6aa173ad94b53d25fc29c4d86dc406e74f75b88ca3abbcb14f1b56de64942676034f250d23fc

Score
10/10
raccoonc4dbcabfa1bfd5a2e647b743fa4acc4ac3086eb2stealer

Malware Config

Extracted

Family

raccoon

Botnet

c4dbcabfa1bfd5a2e647b743fa4acc4ac3086eb2

Attributes
  • url4cnc

    https://telete.in/otpcon

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\usfive_20210917-190718.exe
    "C:\Users\Admin\AppData\Local\Temp\usfive_20210917-190718.exe"
    1⤵
      PID:2384

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2384-115-0x0000000002170000-0x0000000002200000-memory.dmp
      Filesize

      576KB

      Download
    • memory/2384-116-0x0000000000400000-0x0000000000560000-memory.dmp
      Filesize

      1.4MB

      Download