Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-en-20211014 -
submitted
23-11-2021 11:51
Static task
static1
Behavioral task
behavioral1
Sample
usfive_20211123-105700.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
usfive_20211123-105700.exe
Resource
win10-en-20211104
General
-
Target
usfive_20211123-105700.exe
-
Size
541KB
-
MD5
d22f727d31f741939032461a46cd9191
-
SHA1
42e1e3f45d426b8b538d964f8246a6016f37119c
-
SHA256
5598be79fe4d679d65c9c1fed6e66d3da14592159304e04d27b5c092c7310182
-
SHA512
c15270988eaa19425c9247de9287a1db5f5e1d89b57fe030d80e3f3dd7fcef7687d909d9869469b6acfb3f9a82ff4d558f38dc5c1b611a012a7b95d7bcc3fc83
Malware Config
Extracted
raccoon
1.8.3-hotfix
8b6023dd139bdc34aab99c286fae23d1442b4956
-
url4cnc
http://91.219.236.27/h_electricryptors2
http://5.181.156.92/h_electricryptors2
http://91.219.236.207/h_electricryptors2
http://185.225.19.18/h_electricryptors2
http://91.219.237.227/h_electricryptors2
https://t.me/h_electricryptors2
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1156-55-0x0000000002C1B000-0x0000000002C6A000-memory.dmpFilesize
316KB
-
memory/1156-56-0x0000000076531000-0x0000000076533000-memory.dmpFilesize
8KB
-
memory/1156-57-0x00000000002B0000-0x000000000033F000-memory.dmpFilesize
572KB
-
memory/1156-58-0x0000000000400000-0x0000000002B80000-memory.dmpFilesize
39.5MB