Analysis
- max time kernel
4294179s - max time network
122s - platform
windows7_x64 - resource
win7-20220311-en - submitted
18/03/2022, 17:35
General
- Target d8c17cfca59134307cc73c50db5e456f.exe
- Size 634KB
- Sample220318-v512pscfb6
- SHA256 a4de6b05daac0da9e80c020a83350fe787f72fdcd6646fdabc15cda395845231
Malware Config
Extracted
-
raccoon
-
1c0fad6805a0f65d7b597130eb9f089ffbe9857d
-
url4cnc
http://194.180.191.241/capibar
http://103.155.93.35/capibar
https://t.me/capibar
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d8c17cfca59134307cc73c50db5e456f.exe"C:\Users\Admin\AppData\Local\Temp\d8c17cfca59134307cc73c50db5e456f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1760-54-0x000000000028E000-0x00000000002FA000-memory.dmp
memory/1760-55-0x00000000002F9000-0x0000000000349000-memory.dmp
memory/1760-56-0x0000000000400000-0x000000000052E000-memory.dmp
memory/1760-57-0x00000000760A1000-0x00000000760A3000-memory.dmp
memory/1760-58-0x000000000028E000-0x00000000002FA000-memory.dmp
memory/1760-59-0x0000000001CA0000-0x0000000001D2B000-memory.dmp
memory/1760-61-0x00000000002F9000-0x0000000000349000-memory.dmp
memory/1760-60-0x0000000000400000-0x000000000052E000-memory.dmp
memory/1760-62-0x0000000001DD0000-0x0000000001E62000-memory.dmp