Overview

overview

10

Static

static

2d7f0fb702...3a.exe

windows7_x64

10

2d7f0fb702...3a.exe

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-en-20211104
  • submitted
    05/11/2021, 09:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2d7f0fb702eed54ae5ba92c3123c703a.exe
  • Size 422KB
  • Sample211105-lfchdagdbl
  • SHA256 2cc710f8f1bf030e434e66bb8a7835079cbb6fe2351ab959ac1f33a3b6844d1f
  • MD5 SHA1 SHA512
Score
10/10
raccoon58b9777f3c7d8cfbb65b41f6dd8c7141268c30e4stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 58b9777f3c7d8cfbb65b41f6dd8c7141268c30e4

Attributes
  • url4cnc

    http://teleliver.top/jdiamond13

    http://livetelive.top/jdiamond13

    http://teleger.top/jdiamond13

    http://telestrong.top/jdiamond13

    http://tgrampro.top/jdiamond13

    http://teleghost.top/jdiamond13

    http://teleroom.top/jdiamond13

    http://telemir.top/jdiamond13

    http://teletelo.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d7f0fb702eed54ae5ba92c3123c703a.exe
    "C:\Users\Admin\AppData\Local\Temp\2d7f0fb702eed54ae5ba92c3123c703a.exe"
    1⤵
      PID:1992

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/1992-55-0x0000000075D01000-0x0000000075D03000-memory.dmp
          Download

          memory/1992-57-0x0000000001CF0000-0x0000000001D7E000-memory.dmp
          Download

          memory/1992-56-0x0000000000220000-0x000000000026E000-memory.dmp
          Download

          memory/1992-58-0x0000000000400000-0x0000000000491000-memory.dmp
          Download