Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    31-01-2023 14:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    file.exe

  • Size

    294KB

  • MD5

    230d9421f84f0be0a8bbe86bd03e9629

  • SHA1

    8e04318e54e37e23625a608daf39fe058c02690d

  • SHA256

    aba176220478b64db54ec6caf7cc46df9703c32e94273aa0368fbe65ce6f5aa6

  • SHA512

    d746a21a3083062ab1a8fe8594135b586403ff1de50ada3a65a85555464dc49d4a94a471ea5a9a6cb675e353fe53797950bb53aaee7752a418bf6a7f3def3f54

  • SSDEEP

    3072:Y6uIHYbCLpB7R4WQh57U+RUySs3nci7iEOp8c0ADHS7f43H7BFhiAIBRCDR1:sOYbCLpAWQjzRjb3ceku6S7f4VRIj

Score
10/10
raccoon960d8047e2829c4b87de991d706e2490stealer

Malware Config

Extracted

Family

raccoon

Botnet

960d8047e2829c4b87de991d706e2490

C2

http://45.15.156.209/

rc4.plain

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
      PID:1404

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1404-54-0x00000000005AB000-0x00000000005C1000-memory.dmp
      Filesize

      88KB

      Download
    • memory/1404-55-0x0000000000220000-0x000000000023C000-memory.dmp
      Filesize

      112KB

      Download
    • memory/1404-56-0x0000000000400000-0x0000000000463000-memory.dmp
      Filesize

      396KB

      Download