Analysis
- max time kernel
145s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
21/03/2022, 13:49
General
- Target 63b9f9e17254c53c4aacbf9b636c3465.exe
- Size 551KB
- Sample220321-q4n9ascfg2
- SHA256 14eb78c6d9f873f43e453ca56c4d9d1ffbb03ee79fddb87cadeef59626299b6a
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
2e327e4dd6bca590b96a5108291f78478e635b60
Attributes
-
url4cnc
http://174.138.11.98/hkpyagain
http://194.180.191.44/hkpyagain
http://91.219.236.120/sheinl
https://t.me/hkpyagain
rc4.plain
rc4.plain
Signatures
- Raccoon
Simple but powerful infostealer which was very active in 2019.
Processes
-
C:\Users\Admin\AppData\Local\Temp\63b9f9e17254c53c4aacbf9b636c3465.exe"C:\Users\Admin\AppData\Local\Temp\63b9f9e17254c53c4aacbf9b636c3465.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1456-130-0x0000000000528000-0x0000000000578000-memory.dmp
memory/1456-131-0x0000000000528000-0x0000000000578000-memory.dmp
memory/1456-132-0x0000000002200000-0x0000000002292000-memory.dmp
memory/1456-133-0x0000000000400000-0x00000000004B5000-memory.dmp