Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
04-01-2022 20:45
Static task
static1
Behavioral task
behavioral1
Sample
mixfive_20220104-211350.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
mixfive_20220104-211350.exe
Resource
win10-en-20211208
General
-
Target
mixfive_20220104-211350.exe
-
Size
737KB
-
MD5
0fa6313e2e4579324a00e68dacb88189
-
SHA1
f34a44e23ade24b55ab51b9141788282c2d0f827
-
SHA256
d335750b80dcfdc3d70a85bbd28a18cc6c192f0c1a880f2921d7a41b767cb49f
-
SHA512
10751a887ccbf2b9ec8aedbe7d450162e678447d4065d17ff05bf0b0feb0ba08aaba3bfad9c25d979f8cd14c4dccf6bd7f9185f2d461c7b67f70948c8e0587ce
Malware Config
Extracted
raccoon
10da56e7e71e97bdc1f36eb76813bbc3231de7e4
-
url4cnc
http://194.180.174.53/capibar
http://91.219.236.18/capibar
http://194.180.174.41/capibar
http://91.219.236.148/capibar
https://t.me/capibar
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/740-55-0x0000000000A68000-0x0000000000ADC000-memory.dmpFilesize
464KB
-
memory/740-56-0x0000000000220000-0x00000000002B7000-memory.dmpFilesize
604KB
-
memory/740-57-0x0000000000400000-0x0000000000885000-memory.dmpFilesize
4.5MB
-
memory/740-58-0x0000000000ADE000-0x0000000000B3C000-memory.dmpFilesize
376KB
-
memory/740-59-0x0000000000400000-0x0000000000885000-memory.dmpFilesize
4.5MB
-
memory/740-60-0x00000000020E0000-0x0000000002175000-memory.dmpFilesize
596KB
-
memory/740-61-0x0000000000400000-0x0000000000885000-memory.dmpFilesize
4.5MB
-
memory/740-62-0x0000000000400000-0x0000000000885000-memory.dmpFilesize
4.5MB
-
memory/740-63-0x0000000075321000-0x0000000075323000-memory.dmpFilesize
8KB
-
memory/740-65-0x0000000000400000-0x0000000000885000-memory.dmpFilesize
4.5MB
-
memory/740-64-0x00000000002F0000-0x0000000000340000-memory.dmpFilesize
320KB
-
memory/740-66-0x00000000022A0000-0x0000000002332000-memory.dmpFilesize
584KB