Analysis
-
max time kernel
26s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
12-04-2023 13:02
Static task
static1
Behavioral task
behavioral1
Sample
Satup.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Satup.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
14 signatures
150 seconds
General
-
Target
Satup.exe
-
Size
1024.0MB
-
MD5
47f8832cbd46f8177f199861c65725b8
-
SHA1
c3fe7f280a978e3bc3c137c96d878a310e362aed
-
SHA256
9f9059c67c5bb5158ee0eeb6470cd9c25e861f8f58a3f3b339237e1d7c6f67e0
-
SHA512
48194e0383c260e5a2cd4a6b57cfc2862086bd33f1633de9c0f1571ef4c50a247b7fb1190a783be11d3f6135148bd62331eaa5b7ae1e41b653e99a1283b208eb
-
SSDEEP
196608:3EEGSLeQvIcM0fqPJI+a8sET0wyxrWRx14AeHDJlTjpWNGQbMaKGMGDrIcMZZp:3ySOcM0fqPJilEwfxKoAqlPuGF8M2CZp
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
13718a923845c0cdab8ce45c585b8d63
C2
http://45.15.156.198/
xor.plain
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1968-54-0x00000000002C0000-0x00000000002C1000-memory.dmpFilesize
4KB
-
memory/1968-55-0x00000000002C0000-0x00000000002C1000-memory.dmpFilesize
4KB
-
memory/1968-56-0x00000000002C0000-0x00000000002C1000-memory.dmpFilesize
4KB
-
memory/1968-57-0x0000000000400000-0x0000000001A79000-memory.dmpFilesize
22.5MB