Analysis
- max time kernel
63s - max time network
59s - platform
windows7_x64 - resource
win7-20220718-en - resource tags
arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system - submitted
09/08/2022, 16:30
Static task
static1
Behavioral task
behavioral1
Sample
5f91d60e117449a2059bcbaa577a8ce4.exe
Resource
win7-20220718-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f91d60e117449a2059bcbaa577a8ce4.exe
Resource
win10v2004-20220721-en
2 signatures
150 seconds
General
- Target 5f91d60e117449a2059bcbaa577a8ce4.exe
- Size 608KB
- Sample220809-tzsygaeec9
- SHA256 3df88f2029a31f78dd274a199c37a0295aeed62e8dbe3b111e5e078058e97e08
- MD5 5f91d60e117449a2059bcbaa577a8ce4
- SHA1 ccca241fb8fcf7f56e5ed118cb0db87373681024
- SHA512 8b5fe5e3692cff0f0a8e9e6f0663c598136353de9e87c8fd764da8e31693017340073dd100bf397e8208790955fbce24a65236e45f6b64070c0168e734fa15c2
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
afb5c633c4650f69312baef49db9dfa4
C2
-
http://77.73.132.74
rc4.plain
Signatures
- Raccoon Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/1904-55-0x0000000000390000-0x00000000003A6000-memory.dmp family_raccoon behavioral1/memory/1904-56-0x0000000000400000-0x000000000049E000-memory.dmp family_raccoon