Analysis
- max time kernel
151s - max time network
187s - platform
windows7_x64 - resource
win7v20210408 - submitted
03/10/2021, 02:51
General
- Target 1092f0452e7c4b82c9f14fb577e230f8.exe
- Size 583KB
- Sample211003-db677afaer
- SHA256 3e40f7f21045cd80edbb61f9add86be3e64ff92d6b8f0a2a6862adfccd4f959d
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1092f0452e7c4b82c9f14fb577e230f8.exe"C:\Users\Admin\AppData\Local\Temp\1092f0452e7c4b82c9f14fb577e230f8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1660-60-0x00000000762C1000-0x00000000762C3000-memory.dmp
memory/1660-61-0x0000000000310000-0x00000000003A0000-memory.dmp
memory/1660-62-0x0000000000400000-0x000000000049E000-memory.dmp