Analysis
- max time kernel
47s - max time network
497s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
22/02/2023, 11:11
General
- Target Setup.exe
- Size 726.0MB
- Sample230222-nak9faba95
- SHA256 021ebf3c52ec1eb0b1ad741222f3b6795f794e26cc043beecf802a58d3ec2904
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Botnet
-
1269ed6cdc166a49ecc72e46095cface
C2
-
http://79.137.197.160/
-
http://79.137.197.190/
rc4.plain
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3412-136-0x0000000000E50000-0x0000000000E51000-memory.dmp
memory/3412-137-0x0000000000E60000-0x0000000000E61000-memory.dmp
memory/3412-138-0x0000000000E70000-0x0000000000E71000-memory.dmp
memory/3412-139-0x0000000000E90000-0x0000000000E91000-memory.dmp
memory/3412-140-0x0000000000EA0000-0x0000000000EA1000-memory.dmp
memory/3412-141-0x0000000000EB0000-0x0000000000EB1000-memory.dmp
memory/3412-142-0x0000000000EC0000-0x0000000000EC1000-memory.dmp
memory/3412-143-0x0000000000400000-0x0000000000D6E000-memory.dmp