Analysis
-
max time kernel
155s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 13:58
Static task
static1
Behavioral task
behavioral1
Sample
16171b18f60eb2e1f96f7378533ccc405f7611a8d8c7050514e7ac1620484bcb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
16171b18f60eb2e1f96f7378533ccc405f7611a8d8c7050514e7ac1620484bcb.exe
Resource
win10v2004-20221111-en
General
-
Target
16171b18f60eb2e1f96f7378533ccc405f7611a8d8c7050514e7ac1620484bcb.exe
-
Size
393KB
-
MD5
2a8f28e561d7acb3b9c3175281e0f7cf
-
SHA1
ed2f4dd8cef3eaffe6e5c5a4113ebc4485979fc1
-
SHA256
16171b18f60eb2e1f96f7378533ccc405f7611a8d8c7050514e7ac1620484bcb
-
SHA512
cb65e0170cae262e12906a22b722e2b4b44bb4441697bc962a5080feecd056fe223db5dc63d8bafe399ee200e5ed8f4e31d210eede305fcdb79cc82d5d4877a3
-
SSDEEP
6144:4DNdEzgON5Vxpnckwe9aQSgsPXBjxb+aLlzHuubOMoucy3moKRRVMRaI5qy:ANGzV5/pcy9dKZUMHuubjoNy3EqRaI
Malware Config
Extracted
raccoon
1.7.2
a3a85b69314053c3bb015532d1a960a3d08baeb8
-
url4cnc
https://telete.in/baudemars
Signatures
-
Raccoon Stealer payload 2 IoCs
Processes:
resource yara_rule behavioral2/memory/1632-133-0x0000000000970000-0x0000000000A02000-memory.dmp family_raccoon behavioral2/memory/1632-134-0x0000000000400000-0x000000000050D000-memory.dmp family_raccoon
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1632-132-0x0000000000889000-0x00000000008DA000-memory.dmpFilesize
324KB
-
memory/1632-133-0x0000000000970000-0x0000000000A02000-memory.dmpFilesize
584KB
-
memory/1632-134-0x0000000000400000-0x000000000050D000-memory.dmpFilesize
1.1MB
-
memory/1632-135-0x0000000000889000-0x00000000008DA000-memory.dmpFilesize
324KB