Analysis
-
max time kernel
101s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
10-06-2022 07:05
Static task
static1
Behavioral task
behavioral1
Sample
ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe
Malware Config
Extracted
Family
raccoon
Botnet
4de7dee4071e4b4cae054f82610a593c
C2
http://194.180.174.180/
rc4.plain
rc4.plain
Signatures
-
suricata: ET MALWARE Generic Stealer Config Download Request
suricata: ET MALWARE Generic Stealer Config Download Request
-
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
suricata: ET MALWARE Recordbreaker Stealer CnC Checkin
-
suricata: ET MALWARE Win32/RecordBreaker CnC Checkin
suricata: ET MALWARE Win32/RecordBreaker CnC Checkin
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exepid process 928 ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe 928 ac47ed991025f58745a3ca217b2091e0a54cf2a99ddb0c98988ec7e5de8eac6a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/928-130-0x0000000000690000-0x000000000100C000-memory.dmpFilesize
9.5MB
-
memory/928-132-0x0000000000690000-0x000000000100C000-memory.dmpFilesize
9.5MB
-
memory/928-133-0x0000000000690000-0x000000000100C000-memory.dmpFilesize
9.5MB
-
memory/928-134-0x0000000000690000-0x000000000100C000-memory.dmpFilesize
9.5MB