Analysis
- max time kernel
120s - max time network
124s - platform
windows7_x64 - resource
win7-en-20211208 - submitted
02/01/2022, 18:19
General
- Target c085684db882063c21f18d251679b0cc.exe
- Size 743KB
- Sample220102-wx64esafe9
- SHA256 cda92bb8e0734752dc6366275020ce48d75f95d78af9793b40512895ecd2d470
Malware Config
Extracted
-
raccoon
-
10da56e7e71e97bdc1f36eb76813bbc3231de7e4
-
url4cnc
http://194.180.174.53/capibar
http://91.219.236.18/capibar
http://194.180.174.41/capibar
http://91.219.236.148/capibar
https://t.me/capibar
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c085684db882063c21f18d251679b0cc.exe"C:\Users\Admin\AppData\Local\Temp\c085684db882063c21f18d251679b0cc.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/756-54-0x0000000000D0A000-0x0000000000D7D000-memory.dmp
memory/756-55-0x0000000000220000-0x00000000002B7000-memory.dmp
memory/756-56-0x0000000000400000-0x0000000000885000-memory.dmp
memory/756-57-0x0000000000D7E000-0x0000000000DDC000-memory.dmp
memory/756-58-0x0000000000400000-0x0000000000885000-memory.dmp
memory/756-59-0x00000000002D0000-0x0000000000365000-memory.dmp
memory/756-60-0x0000000000400000-0x0000000000885000-memory.dmp
memory/756-62-0x0000000075531000-0x0000000075533000-memory.dmp
memory/756-61-0x0000000000400000-0x0000000000885000-memory.dmp
memory/756-63-0x0000000000A20000-0x0000000000A70000-memory.dmp
memory/756-64-0x0000000002300000-0x0000000002392000-memory.dmp
memory/756-65-0x0000000000400000-0x0000000000885000-memory.dmp