Analysis
- max time kernel
264s - max time network
468s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
- submitted
07/12/2022, 13:45
General
- Target Photoshop CC Crack/Set-up.exe
- Size 726.6MB
- Sample221207-q2exvaab9s
- SHA256 a92a41a7f983d38d934f5fa6071c39e9da2c21a906bceddce05858000f7d256e
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
1c145396a071df7e490bd2cf3def4bdf
C2
-
http://45.15.156.120/
rc4.plain
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Photoshop CC Crack\Set-up.exe"C:\Users\Admin\AppData\Local\Temp\Photoshop CC Crack\Set-up.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1588-132-0x0000000000400000-0x0000000000A9C000-memory.dmp
memory/1588-133-0x0000000000400000-0x0000000000A9C000-memory.dmp
memory/1588-134-0x0000000000400000-0x0000000000A9C000-memory.dmp
memory/1588-135-0x0000000000400000-0x0000000000A9C000-memory.dmp