Analysis
-
max time kernel
190s -
max time network
200s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
08-06-2022 21:12
General
-
Target
175f4911374a35c16c2c51c839228f89a2548343ef50db64c59e59a343d55d39.exe
-
Size
446KB
-
MD5
ddf88046ba44b91de71f57507250d73b
-
SHA1
4f669eef88bed51aa29c8443b5f74491caf87f52
-
SHA256
175f4911374a35c16c2c51c839228f89a2548343ef50db64c59e59a343d55d39
-
SHA512
919597aed8cf7549d2d31e9d889eaca27fbe5e6e42aa6e5b59bfd1a6c5aa16a3a2cea3c77b56fa82dc702c232cc3a244e5b1e2d3ca2b3c2528ee3b5f2747b463
Score
10/10
Malware Config
Extracted
Family
raccoon
Version
1.7.3
Botnet
16992cd33145ccbb6feeacb4e84400a56448fa14
Attributes
-
url4cnc
https://telete.in/baudemars
rc4.plain
rc4.plain
Signatures
-
Raccoon
Simple but powerful infostealer which was very active in 2019.
-
Raccoon Stealer Payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\175f4911374a35c16c2c51c839228f89a2548343ef50db64c59e59a343d55d39.exe"C:\Users\Admin\AppData\Local\Temp\175f4911374a35c16c2c51c839228f89a2548343ef50db64c59e59a343d55d39.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3512-130-0x0000000000B18000-0x0000000000B68000-memory.dmpFilesize
320KB
-
memory/3512-131-0x0000000000A10000-0x0000000000AA1000-memory.dmpFilesize
580KB
-
memory/3512-132-0x0000000000400000-0x0000000000866000-memory.dmpFilesize
4.4MB
-
memory/3512-133-0x0000000000B18000-0x0000000000B68000-memory.dmpFilesize
320KB
-
memory/3512-134-0x0000000000A10000-0x0000000000AA1000-memory.dmpFilesize
580KB