Analysis
-
max time kernel
139s -
max time network
142s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
20-11-2021 15:18
Static task
static1
Behavioral task
behavioral1
Sample
usfive_20211120-141702.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
usfive_20211120-141702.exe
Resource
win10-en-20211014
General
-
Target
usfive_20211120-141702.exe
-
Size
571KB
-
MD5
e65611987da76fda56ecca8b6009cd5c
-
SHA1
bd36acdbd5ac7d3a6b6347819228bd018e8f510c
-
SHA256
14ed0b00b62cff6c3f871b8ab11829d8e807caa62aae2c8cefef0af44033d4fe
-
SHA512
67989cb0c3ab58b950a98aac2ac97ea489ee0b36514e09eed8f24d5a33839dd7d5f30e29202fae8f0716f52c007d7e3445eb3386c0299f870ac1f4ab7039ff73
Malware Config
Extracted
raccoon
1.8.3-hotfix
8b6023dd139bdc34aab99c286fae23d1442b4956
-
url4cnc
http://91.219.236.27/h_electricryptors2
http://5.181.156.92/h_electricryptors2
http://91.219.236.207/h_electricryptors2
http://185.225.19.18/h_electricryptors2
http://91.219.237.227/h_electricryptors2
https://t.me/h_electricryptors2
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1668-55-0x0000000002C6B000-0x0000000002CBA000-memory.dmpFilesize
316KB
-
memory/1668-56-0x0000000075901000-0x0000000075903000-memory.dmpFilesize
8KB
-
memory/1668-57-0x0000000000370000-0x00000000003FF000-memory.dmpFilesize
572KB
-
memory/1668-58-0x0000000000400000-0x0000000002B87000-memory.dmpFilesize
39.5MB