Analysis
-
max time kernel
188s -
max time network
240s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
29-01-2023 17:52
Static task
static1
Behavioral task
behavioral1
Sample
a7fecf67f417f55557785beb16c784930f1843c8670c4b1621467b04c4a0b81b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7fecf67f417f55557785beb16c784930f1843c8670c4b1621467b04c4a0b81b.exe
Resource
win10v2004-20220812-en
General
-
Target
a7fecf67f417f55557785beb16c784930f1843c8670c4b1621467b04c4a0b81b.exe
-
Size
542KB
-
MD5
222232e75b94fb0383e8ee556f8f687c
-
SHA1
f94460845411aa9d8bab738dadcfff4e36f1d525
-
SHA256
a7fecf67f417f55557785beb16c784930f1843c8670c4b1621467b04c4a0b81b
-
SHA512
43ef4700468cd5706944956d865d209d23eda343ffef3c9e2aa6c1defa63bac7cfa123daf9fda243a9ff571844cfd9f33b176777e0b9787a1d79014817b08ed9
-
SSDEEP
12288:JwR651v0RkfjRup+y3n1hqaxnee9xq7Qp4pj05ps9:JgasRkrin1Rxee9cQKQ5p
Malware Config
Extracted
raccoon
1.7.2
9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab
-
url4cnc
https://telete.in/jagressor_kz
Signatures
-
Raccoon Stealer payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1720-57-0x0000000000900000-0x0000000000992000-memory.dmp family_raccoon behavioral1/memory/1720-58-0x0000000000400000-0x0000000000881000-memory.dmp family_raccoon
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1720-54-0x0000000000288000-0x00000000002D9000-memory.dmpFilesize
324KB
-
memory/1720-55-0x00000000763D1000-0x00000000763D3000-memory.dmpFilesize
8KB
-
memory/1720-56-0x0000000000288000-0x00000000002D9000-memory.dmpFilesize
324KB
-
memory/1720-57-0x0000000000900000-0x0000000000992000-memory.dmpFilesize
584KB
-
memory/1720-58-0x0000000000400000-0x0000000000881000-memory.dmpFilesize
4.5MB
-
memory/1720-59-0x0000000000288000-0x00000000002D9000-memory.dmpFilesize
324KB