Overview

overview

10

Static

static

a1ac47ffd6...96.exe

windows7-x64

10

a1ac47ffd6...96.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    318s
  • max time network
    378s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-11-2022 15:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe

  • Size

    511KB

  • MD5

    dabdfbed816b2813b2239c9abf414f18

  • SHA1

    da9293468e03c8fa1a8266420149a0bb56e94b83

  • SHA256

    a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896

  • SHA512

    8cae781d0db39558cb18bcb168c9404f449b1ea6cbfa6a61883c5d229e981f56c699d60fc83fe6719b1833849d77471a12525374ff5fc5c39ee8cd8d933e5b4b

  • SSDEEP

    12288:xnud5v3/99zNuRW+MahkP1rgtMtqnhPdtLg:wn3VZ2W+FargjhPD

Score
10/10
raccoon9ba64f4b6fe448911470a88f09d6e7d5b92ff0abstealer

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe
    "C:\Users\Admin\AppData\Local\Temp\a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896.exe"
    1⤵
      PID:3720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3720-132-0x0000000000A38000-0x0000000000A89000-memory.dmp
      Filesize

      324KB

      Download
    • memory/3720-133-0x0000000002660000-0x00000000026F2000-memory.dmp
      Filesize

      584KB

      Download
    • memory/3720-134-0x0000000000400000-0x00000000008CD000-memory.dmp
      Filesize

      4.8MB

      Download