Analysis
- max time kernel
122s - max time network
122s - platform
windows7_x64 - resource
win7-en-20211208 - submitted
19/01/2022, 05:39
General
- Target 7b956c49b8f5e0bc6d0b7745e468e932.exe
- Size 687KB
- Sample220119-gccazsfeer
- SHA256 c99134879d691e2bbbf506c3fcc992d1c7b4153c07e7f3952b80c92c944e5539
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.5
Botnet
-
470193d69fd872b73819c5e70dc68242c10ccbce
Attributes
-
url4cnc
http://185.163.204.22/capibar
http://178.62.113.205/capibar
https://t.me/capibar
rc4.plain
rc4.plain
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7b956c49b8f5e0bc6d0b7745e468e932.exe"C:\Users\Admin\AppData\Local\Temp\7b956c49b8f5e0bc6d0b7745e468e932.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1916-54-0x0000000000720000-0x00000000007FE000-memory.dmp
memory/1916-55-0x0000000000220000-0x0000000000291000-memory.dmp
memory/1916-56-0x0000000000330000-0x00000000003C3000-memory.dmp
memory/1916-57-0x0000000000400000-0x0000000000619000-memory.dmp
memory/1916-59-0x0000000075F21000-0x0000000075F23000-memory.dmp
memory/1916-58-0x0000000000400000-0x0000000000619000-memory.dmp
memory/1916-60-0x0000000000620000-0x00000000006B2000-memory.dmp
memory/1916-61-0x0000000000400000-0x0000000000619000-memory.dmp