Overview

overview

10

Static

static

bdf7f13dca...60.exe

windows7-x64

10

bdf7f13dca...60.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    56s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2022, 19:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe

  • Size

    302KB

  • MD5

    cd0f0ac51d617e7deea5a192f2e2c9d6

  • SHA1

    008fddba90148dd4153f52af91ad4a8d51a0b8d9

  • SHA256

    bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60a8ca340e41956d42ef0

  • SHA512

    a85bb3ce2a7d0a4b688970bbd4d3b32a0abaa829b75469d1f4e9a7e3ef858148ae8cf59a1e4ac5191a0b2725127d4817fcebfa2809c025ad368050968b9fec3e

  • SSDEEP

    3072:mBGbzTCEIYhxP5FZI4Do9tzxHm8y9C9dkndrTbPNMVQDo64zUT:kGbzTbB2dxG8y9XNH2ao6b

Score
10/10
raccoondde3f69d00a438843e8c5509eb29534estealer

Malware Config

Extracted

Family

raccoon

Botnet

dde3f69d00a438843e8c5509eb29534e

C2

http://95.141.41.13/

rc4.plain

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe
    "C:\Users\Admin\AppData\Local\Temp\bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe"
    1⤵
      PID:1192

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1192-54-0x0000000076701000-0x0000000076703000-memory.dmp

            Filesize

            8KB

            Download

          • memory/1192-55-0x0000000002E1B000-0x0000000002E30000-memory.dmp

            Filesize

            84KB

            Download

          • memory/1192-56-0x0000000000220000-0x0000000000230000-memory.dmp

            Filesize

            64KB

            Download

          • memory/1192-57-0x0000000000400000-0x0000000002C39000-memory.dmp

            Filesize

            40.2MB

            Download