Analysis
-
max time kernel
203s -
max time network
218s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
30-11-2022 15:39
Static task
static1
Behavioral task
behavioral1
Sample
a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe
Resource
win10v2004-20221111-en
General
-
Target
a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe
-
Size
511KB
-
MD5
dabdfbed816b2813b2239c9abf414f18
-
SHA1
da9293468e03c8fa1a8266420149a0bb56e94b83
-
SHA256
a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896
-
SHA512
8cae781d0db39558cb18bcb168c9404f449b1ea6cbfa6a61883c5d229e981f56c699d60fc83fe6719b1833849d77471a12525374ff5fc5c39ee8cd8d933e5b4b
-
SSDEEP
12288:xnud5v3/99zNuRW+MahkP1rgtMtqnhPdtLg:wn3VZ2W+FargjhPD
Malware Config
Extracted
raccoon
1.7.2
9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab
-
url4cnc
https://telete.in/jagressor_kz
Signatures
-
Raccoon Stealer payload 3 IoCs
Processes:
resource yara_rule behavioral1/memory/2028-56-0x0000000000220000-0x00000000002B2000-memory.dmp family_raccoon behavioral1/memory/2028-57-0x0000000000400000-0x00000000008CD000-memory.dmp family_raccoon behavioral1/memory/2028-59-0x0000000000220000-0x00000000002B2000-memory.dmp family_raccoon
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2028-54-0x0000000075511000-0x0000000075513000-memory.dmpFilesize
8KB
-
memory/2028-55-0x0000000000A9C000-0x0000000000AEC000-memory.dmpFilesize
320KB
-
memory/2028-56-0x0000000000220000-0x00000000002B2000-memory.dmpFilesize
584KB
-
memory/2028-57-0x0000000000400000-0x00000000008CD000-memory.dmpFilesize
4.8MB
-
memory/2028-58-0x0000000000A9C000-0x0000000000AEC000-memory.dmpFilesize
320KB
-
memory/2028-59-0x0000000000220000-0x00000000002B2000-memory.dmpFilesize
584KB