Analysis
-
max time kernel
40s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
10-06-2022 07:05
General
-
Target
ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
4de7dee4071e4b4cae054f82610a593c
C2
http://194.180.174.180/
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
suricata: ET MALWARE Generic Stealer Config Download Request
suricata: ET MALWARE Generic Stealer Config Download Request
-
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
-
suricata: ET MALWARE Win32/RecordBreaker CnC Checkin
suricata: ET MALWARE Win32/RecordBreaker CnC Checkin
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe"C:\Users\Admin\AppData\Local\Temp\ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/732-54-0x0000000001330000-0x0000000001CAC000-memory.dmpFilesize
9.5MB
-
memory/732-56-0x0000000075781000-0x0000000075783000-memory.dmpFilesize
8KB
-
memory/732-57-0x0000000001330000-0x0000000001CAC000-memory.dmpFilesize
9.5MB
-
memory/732-58-0x0000000001330000-0x0000000001CAC000-memory.dmpFilesize
9.5MB