Overview

overview

10

Static

static

54d61c8728...e7.exe

windows7_x64

10

54d61c8728...e7.exe

windows10_x64

10

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-en-20210920
  • submitted
    30-10-2021 00:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    54d61c8728f2b5872675212017a5e0e7.exe

  • Size

    582KB

  • MD5

    54d61c8728f2b5872675212017a5e0e7

  • SHA1

    ea3fe4632335c7fe5c883a64007ba1f3180d8999

  • SHA256

    678acb0210b49178697f000aa87619018626bb64ed483690bb266d942e0f5c1e

  • SHA512

    af22e75a31b3309dee47e6833125194d52bc7b1249c9709324a5eb3da6d9b5cf6c03a33c2394d948a97e5aabf8964c489efb0ce4cf44664be5ee54501587db7a

Score
10/10
raccoon7c9b4504a63ed23664e38808e65948379b790395stealer

Malware Config

Extracted

Family

raccoon

Botnet

7c9b4504a63ed23664e38808e65948379b790395

Attributes
  • url4cnc

    http://telegka.top/capibar

    http://telegin.top/capibar

    https://t.me/capibar

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\54d61c8728f2b5872675212017a5e0e7.exe
    "C:\Users\Admin\AppData\Local\Temp\54d61c8728f2b5872675212017a5e0e7.exe"
    1⤵
      PID:1532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1532-54-0x0000000003268000-0x00000000032B7000-memory.dmp
      Filesize

      316KB

      Download
    • memory/1532-55-0x0000000076201000-0x0000000076203000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1532-56-0x0000000000220000-0x00000000002AE000-memory.dmp
      Filesize

      568KB

      Download
    • memory/1532-57-0x0000000000400000-0x0000000002DE8000-memory.dmp
      Filesize

      41.9MB

      Download