Analysis
-
max time kernel
134s -
max time network
134s -
platform
windows7_x64 -
resource
win7-en-20211104 -
submitted
15-11-2021 07:51
Static task
static1
Behavioral task
behavioral1
Sample
bf644c2bffc998fcdf82489cbb63752b.exe
Resource
win7-en-20211104
Behavioral task
behavioral2
Sample
bf644c2bffc998fcdf82489cbb63752b.exe
Resource
win10-en-20211014
General
-
Target
bf644c2bffc998fcdf82489cbb63752b.exe
-
Size
499KB
-
MD5
bf644c2bffc998fcdf82489cbb63752b
-
SHA1
999cce51b9e43959323f37a1f4650d47cbaf53d7
-
SHA256
32788bd3c4dbc325754fef4cf6242f38210e7db4b39a69c5f742cf9675244013
-
SHA512
a598efd1f4c5a25362b6d8bd22ca0f0be9ec79ba3fbd788fc1a65d5ee080192821eebfb92024c66e58a86d4ea8c8e8828bc0a042f52ae02d83a1f43854a05adf
Malware Config
Extracted
raccoon
1.8.3-hotfix
675718a5f2ce6d3cacf6cb04a512f5637eae995f
-
url4cnc
http://91.219.236.27/agrybirdsgamerept
http://5.181.156.92/agrybirdsgamerept
http://91.219.236.207/agrybirdsgamerept
http://185.225.19.18/agrybirdsgamerept
http://91.219.237.227/agrybirdsgamerept
http://185.163.47.176/agrybirdsgamerept
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/320-55-0x00000000765D1000-0x00000000765D3000-memory.dmpFilesize
8KB
-
memory/320-57-0x0000000001C30000-0x0000000001CBF000-memory.dmpFilesize
572KB
-
memory/320-58-0x0000000000400000-0x0000000000491000-memory.dmpFilesize
580KB
-
memory/320-56-0x0000000000290000-0x00000000002DF000-memory.dmpFilesize
316KB