Analysis
-
max time kernel
139s -
max time network
139s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
21-11-2021 13:09
Static task
static1
Behavioral task
behavioral1
Sample
usfive_20211121-035620.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
usfive_20211121-035620.exe
Resource
win10-en-20211104
General
-
Target
usfive_20211121-035620.exe
-
Size
587KB
-
MD5
d39c4d64f3b0076cd7b90c56d181a76c
-
SHA1
0ed05cacdb713f93f5ce1a7c135124ea6ec620e8
-
SHA256
413f6cd5adc8df2f1b02d771960e7a05af23b9ed6a1749151d6c3eea62c9eaab
-
SHA512
ebc608a116ab30eff72d2725b49c897279321813e9efa6d249f11e5e22b09cfb8456e977953d9f9a144204cb1785ea265efcb458cf56049addb47844202b0b72
Malware Config
Extracted
raccoon
1.8.3-hotfix
8b6023dd139bdc34aab99c286fae23d1442b4956
-
url4cnc
http://91.219.236.27/h_electricryptors2
http://5.181.156.92/h_electricryptors2
http://91.219.236.207/h_electricryptors2
http://185.225.19.18/h_electricryptors2
http://91.219.237.227/h_electricryptors2
https://t.me/h_electricryptors2
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2000-55-0x0000000002CA8000-0x0000000002CF7000-memory.dmpFilesize
316KB
-
memory/2000-56-0x0000000075D41000-0x0000000075D43000-memory.dmpFilesize
8KB
-
memory/2000-57-0x0000000000220000-0x00000000002AF000-memory.dmpFilesize
572KB
-
memory/2000-58-0x0000000000400000-0x0000000002B8B000-memory.dmpFilesize
39.5MB