Overview

overview

10

Static

static

bbdd836501...4a.exe

windows7-x64

10

bbdd836501...4a.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-01-2023 21:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bbdd836501039f3096f442c826fe284ee50f3877b823f9aaae226d548502874a.exe

  • Size

    449KB

  • MD5

    d1d05533c47d26351285ec8fc3cf70bf

  • SHA1

    565891adc48e47421d84b6e092d06b03c67266c9

  • SHA256

    bbdd836501039f3096f442c826fe284ee50f3877b823f9aaae226d548502874a

  • SHA512

    548619b41d9944a4a677c9352c093a6dd10890f9f10f1d1a4b186f728e9a1e791abc2dee66f48efc46e33c14f9fd2166e5aeb75bf5d7151a7468d68d1dbb4e41

  • SSDEEP

    12288:yhwjNVHGeVn6mEH5gL8xoUD/xbWclK4jC+gXjV:T/HGeVd8xnNbWS5kTV

Score
10/10
raccoon9ba64f4b6fe448911470a88f09d6e7d5b92ff0abstealer

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bbdd836501039f3096f442c826fe284ee50f3877b823f9aaae226d548502874a.exe
    "C:\Users\Admin\AppData\Local\Temp\bbdd836501039f3096f442c826fe284ee50f3877b823f9aaae226d548502874a.exe"
    1⤵
      PID:3648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3648-132-0x0000000000BE2000-0x0000000000C32000-memory.dmp
      Filesize

      320KB

      Download
    • memory/3648-133-0x0000000000940000-0x00000000009D2000-memory.dmp
      Filesize

      584KB

      Download
    • memory/3648-134-0x0000000000400000-0x000000000086A000-memory.dmp
      Filesize

      4.4MB

      Download
    • memory/3648-135-0x0000000000BE2000-0x0000000000C32000-memory.dmp
      Filesize

      320KB

      Download