Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2023 21:16
Static task
static1
Behavioral task
behavioral1
Sample
27f9c595cca523d0e7d83ea39783182feedd49d118562f6162e19f6d323b3fba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27f9c595cca523d0e7d83ea39783182feedd49d118562f6162e19f6d323b3fba.exe
Resource
win10v2004-20220812-en
General
-
Target
27f9c595cca523d0e7d83ea39783182feedd49d118562f6162e19f6d323b3fba.exe
-
Size
464KB
-
MD5
aa219eeb5bd0d70c4b7683af9772a342
-
SHA1
e273de4638743232c13aa274f399aa91df4ecbe6
-
SHA256
27f9c595cca523d0e7d83ea39783182feedd49d118562f6162e19f6d323b3fba
-
SHA512
33b4813b4c463c21413eacfc66ce730bf8b9fc125150e9392235b4dbd91b7141e681fc63cb7fc5f03fb9fcc9f64d8ed4deb76600dfb2acfbf96f2a852c36b661
-
SSDEEP
6144:wSkxlcOY/gtrdQ03ZlTPpEbVJJgn4fqjLp3zkkHpkriqe28aMayyLH7LzovvDhEU:VKlcOY/gtbpYxJJCppJXyHLzoHDhN
Malware Config
Extracted
raccoon
1.7.2
a3a85b69314053c3bb015532d1a960a3d08baeb8
-
url4cnc
https://telete.in/baudemars
Signatures
-
Raccoon Stealer payload 2 IoCs
Processes:
resource yara_rule behavioral2/memory/4728-133-0x0000000000EA0000-0x0000000000F32000-memory.dmp family_raccoon behavioral2/memory/4728-134-0x0000000000400000-0x000000000086D000-memory.dmp family_raccoon
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4728-132-0x0000000000B77000-0x0000000000BC8000-memory.dmpFilesize
324KB
-
memory/4728-133-0x0000000000EA0000-0x0000000000F32000-memory.dmpFilesize
584KB
-
memory/4728-134-0x0000000000400000-0x000000000086D000-memory.dmpFilesize
4.4MB
-
memory/4728-135-0x0000000000B77000-0x0000000000BC8000-memory.dmpFilesize
324KB