Analysis
-
max time kernel
136s -
max time network
138s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
15-11-2021 06:46
Static task
static1
Behavioral task
behavioral1
Sample
0b2463e542ff395417ecb1cd37f77556.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
0b2463e542ff395417ecb1cd37f77556.exe
Resource
win10-en-20211014
General
-
Target
0b2463e542ff395417ecb1cd37f77556.exe
-
Size
501KB
-
MD5
0b2463e542ff395417ecb1cd37f77556
-
SHA1
9a3285c0dec47646a97e17adc5cbc5fe849911e7
-
SHA256
36b9f1cd3c80826ab3b0ee34a8778ec6fda5143fc8df96297ba586c2e09164e5
-
SHA512
feec0cf257303cdde0a8b832a67b273a57fd54b016387a28d5fa46599956c2024dc6d83b74c4856b41d7b7ab4ea89d0ab8b164e01f0be914d562cdaf3221c101
Malware Config
Extracted
raccoon
1.8.3-hotfix
675718a5f2ce6d3cacf6cb04a512f5637eae995f
-
url4cnc
http://91.219.236.27/agrybirdsgamerept
http://5.181.156.92/agrybirdsgamerept
http://91.219.236.207/agrybirdsgamerept
http://185.225.19.18/agrybirdsgamerept
http://91.219.237.227/agrybirdsgamerept
http://185.163.47.176/agrybirdsgamerept
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1220-55-0x0000000076231000-0x0000000076233000-memory.dmpFilesize
8KB
-
memory/1220-57-0x0000000001C50000-0x0000000001CDF000-memory.dmpFilesize
572KB
-
memory/1220-56-0x00000000004A0000-0x00000000004EF000-memory.dmpFilesize
316KB
-
memory/1220-58-0x0000000000400000-0x0000000000491000-memory.dmpFilesize
580KB