Overview

overview

10

Static

static

12e524ab34...83.exe

windows7_x64

10

12e524ab34...83.exe

windows10_x64

10

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    07-12-2021 10:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12e524ab34859f7ffdc7f92cdbe2e283.exe

  • Size

    570KB

  • MD5

    12e524ab34859f7ffdc7f92cdbe2e283

  • SHA1

    3e7b2ac54d1523be93df208c33721a97bec0cb67

  • SHA256

    8016cf2a984909cad748683e27ecef70a65c417317b55e8b4031d0aec1f10f06

  • SHA512

    d667b9e122cf5cbbeeb095151474a27b581039ed6811f51e5d359387094b78bff3f15cf7f69e1d1d79311eb8efbf12f410fe7df5a9d129e2310e88c02ed85ac7

Score
10/10
raccoonfd4f23250443a724a3d1548e6ab07c481dfc2814stealer

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\12e524ab34859f7ffdc7f92cdbe2e283.exe
    "C:\Users\Admin\AppData\Local\Temp\12e524ab34859f7ffdc7f92cdbe2e283.exe"
    1⤵
      PID:2764

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2764-115-0x0000000000741000-0x0000000000790000-memory.dmp
      Filesize

      316KB

      Download
    • memory/2764-116-0x00000000005C0000-0x000000000070A000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/2764-117-0x0000000000400000-0x0000000000510000-memory.dmp
      Filesize

      1.1MB

      Download