Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
08-01-2022 14:22
Static task
static1
Behavioral task
behavioral1
Sample
mixfive_20220108-135000.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
mixfive_20220108-135000.exe
Resource
win10-en-20211208
General
-
Target
mixfive_20220108-135000.exe
-
Size
690KB
-
MD5
6cf7bee2b585caa258c0d19040baed0c
-
SHA1
1da155cc868e60f8a522785068bab6e9963a24bf
-
SHA256
12ff67cb14068738bc7a5a153125c39879dca2ebac56ba4dac98232d5ea60132
-
SHA512
bc5c77e1b42e27a378d9091640b07cd6607f0450a38099c2a18a8bf47f2efd0d22d5c4d1073620086ca994d77b4053f6c21dc9c1ceb17d9b5491b64a1ff03750
Malware Config
Extracted
raccoon
10da56e7e71e97bdc1f36eb76813bbc3231de7e4
-
url4cnc
http://194.180.174.53/capibar
http://91.219.236.18/capibar
http://194.180.174.41/capibar
http://91.219.236.148/capibar
https://t.me/capibar
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1648-54-0x0000000002BF0000-0x0000000002C63000-memory.dmpFilesize
460KB
-
memory/1648-55-0x0000000002C70000-0x0000000002D07000-memory.dmpFilesize
604KB
-
memory/1648-56-0x0000000000400000-0x0000000002BE3000-memory.dmpFilesize
39.9MB
-
memory/1648-57-0x00000000002BE000-0x000000000031C000-memory.dmpFilesize
376KB
-
memory/1648-58-0x0000000000400000-0x0000000002BE3000-memory.dmpFilesize
39.9MB
-
memory/1648-59-0x0000000004520000-0x00000000045B5000-memory.dmpFilesize
596KB
-
memory/1648-60-0x0000000000400000-0x0000000002BE3000-memory.dmpFilesize
39.9MB
-
memory/1648-61-0x0000000000400000-0x0000000002BE3000-memory.dmpFilesize
39.9MB
-
memory/1648-62-0x0000000076001000-0x0000000076003000-memory.dmpFilesize
8KB
-
memory/1648-63-0x00000000003A0000-0x00000000003F0000-memory.dmpFilesize
320KB
-
memory/1648-64-0x00000000045C0000-0x0000000004652000-memory.dmpFilesize
584KB
-
memory/1648-65-0x0000000000400000-0x0000000002BE3000-memory.dmpFilesize
39.9MB