Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04-11-2022 19:51
General
-
Target
bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe
-
Size
302KB
-
MD5
cd0f0ac51d617e7deea5a192f2e2c9d6
-
SHA1
008fddba90148dd4153f52af91ad4a8d51a0b8d9
-
SHA256
bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60a8ca340e41956d42ef0
-
SHA512
a85bb3ce2a7d0a4b688970bbd4d3b32a0abaa829b75469d1f4e9a7e3ef858148ae8cf59a1e4ac5191a0b2725127d4817fcebfa2809c025ad368050968b9fec3e
-
SSDEEP
3072:mBGbzTCEIYhxP5FZI4Do9tzxHm8y9C9dkndrTbPNMVQDo64zUT:kGbzTbB2dxG8y9XNH2ao6b
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
dde3f69d00a438843e8c5509eb29534e
C2
http://95.141.41.13/
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe"C:\Users\Admin\AppData\Local\Temp\bdf7f13dca65ddcf112e9ff77f6ea6ca00c9dc23f5f60.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1436 -s 10402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1436 -ip 14361⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
-
Filesize
64KB
-
Filesize
40.2MB
-
Filesize
84KB
-
Filesize
40.2MB