Analysis
- max time kernel
153s - max time network
160s - platform
windows7_x64 - resource
win7v20210408 - submitted
03/10/2021, 03:16
General
- Target fe8aa7e0bb26744c58dd5090e75d2d58.exe
- Size 584KB
- Sample211003-dsgnvsfahn
- SHA256 13d64ea9d98adb90dcbd7fec75d8932ff4dc6b11ef206472bb8919310c8c6924
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4
Attributes
-
url4cnc
https://t.me/agrybirdsgamerept
rc4.plain
rc4.plain
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe8aa7e0bb26744c58dd5090e75d2d58.exe"C:\Users\Admin\AppData\Local\Temp\fe8aa7e0bb26744c58dd5090e75d2d58.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1836-60-0x0000000075D51000-0x0000000075D53000-memory.dmp
memory/1836-61-0x0000000000500000-0x0000000000590000-memory.dmp
memory/1836-62-0x0000000000400000-0x000000000049E000-memory.dmp