Overview

overview

10

Static

static

MIX3h1_202...57.exe

windows7_x64

10

MIX3h1_202...57.exe

windows10_x64

10

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-en-20211014
  • submitted
    30-10-2021 17:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MIX3h1_20211030-174457.exe

  • Size

    458KB

  • MD5

    17a4417f99be4e1fd6a8aead588964f3

  • SHA1

    1fe65589fc74c80bcedc52eedbd774036f9a5fcb

  • SHA256

    193532de47c00c9e4b934badee47b3f6cc8fd7b29c265509102474abfd6db97b

  • SHA512

    b171879e1d11840814c04718838867ea2b40b6111425844fd622acd9d9ad340be67e6e382e452ee71208379faf007e2f295fc81b7d15ec2823f79b553a67b9cc

Score
10/10
raccooneae58d570cc74796157b14c575bd3adc01116ca0stealer

Malware Config

Extracted

Family

raccoon

Botnet

eae58d570cc74796157b14c575bd3adc01116ca0

Attributes
  • url4cnc

    http://telegka.top/rino115sipsip

    http://telegin.top/rino115sipsip

    https://t.me/rino115sipsip

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\MIX3h1_20211030-174457.exe
    "C:\Users\Admin\AppData\Local\Temp\MIX3h1_20211030-174457.exe"
    1⤵
      PID:1544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1544-55-0x0000000075BA1000-0x0000000075BA3000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1544-57-0x0000000000280000-0x000000000030E000-memory.dmp
      Filesize

      568KB

      Download
    • memory/1544-56-0x0000000000220000-0x000000000026E000-memory.dmp
      Filesize

      312KB

      Download
    • memory/1544-58-0x0000000000400000-0x0000000000491000-memory.dmp
      Filesize

      580KB

      Download