Analysis
-
max time kernel
127s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
-
submitted
11-08-2022 02:05
General
-
Target
Opensea Mint/Launcher.exe
-
Size
2.4MB
-
MD5
4cd71ee88eab1d1774584e560dd05a5e
-
SHA1
e359c0e8fe530d3bca70a3eecaed20df051d0e75
-
SHA256
2318aab19d001baa674543b6fef1626ae23731f38ceaee3babcc643c9ae88a1f
-
SHA512
7e46d2dcc44dd5b65c6a2857d08fa1226b6df69c089261c894096343c0a868b2e0d6965e7d1ea5c69336c6846a2dfe56736912f497ae7640fbf264859aecf166
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
7af9c6169887d79cc4d744abe122c9c2
C2
http://213.252.247.130/
http://213.252.247.152/
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer payload 2 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 44 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Opensea Mint\Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Opensea Mint\Launcher.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4612-130-0x0000000000D40000-0x00000000016D4000-memory.dmpFilesize
9.6MB
-
memory/4612-131-0x000000007F4E0000-0x000000007F8B1000-memory.dmpFilesize
3.8MB
-
memory/4612-132-0x0000000000D40000-0x00000000016D4000-memory.dmpFilesize
9.6MB
-
memory/4612-133-0x0000000000D40000-0x00000000016D4000-memory.dmpFilesize
9.6MB