Analysis
-
max time kernel
145s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
08-10-2022 05:15
General
-
Target
wallets-free.exe
-
Size
726.8MB
-
MD5
9d2129eff8df382187c56b9a553d8364
-
SHA1
7deca86e7b293350c95088336d8a3539d7b13092
-
SHA256
dda606f1062ccca33dba4bfd79015e24e63c58bde4c9cd7da84dec3ad5bbc44d
-
SHA512
0d300cf2f21dcf94b92e46f324b150ce0dd4655e266dfba030a00b30b7838af80daff88e02fb9a7b6d42a04d1169bf15b7be1c0df3d0656c8c8f0ee0a9725ef2
-
SSDEEP
196608:hCvb2YDh+3FEImhWp38oJPEUCWFspvbZKAc/hHze/M5jzft3iyCPD:Ivb2Y1+SImv+PEJtZwquzfpRe
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
ac1f7cc7f8f2bd7aa49eae057eecab96
C2
http://193.233.48.6/
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\wallets-free.exe"C:\Users\Admin\AppData\Local\Temp\wallets-free.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.6MB
-
Filesize
10.6MB
-
Filesize
10.6MB