Analysis
-
max time kernel
184s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
30-04-2023 21:39
Static task
static1
Behavioral task
behavioral1
Sample
73f8b780611ace51cb61c01975afe06c.bin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
73f8b780611ace51cb61c01975afe06c.bin.exe
Resource
win10v2004-20230220-en
General
-
Target
73f8b780611ace51cb61c01975afe06c.bin.exe
-
Size
15.6MB
-
MD5
73f8b780611ace51cb61c01975afe06c
-
SHA1
5a6b70733e53f30e6f30b1ff59c19489f1248b51
-
SHA256
069494fedfdfd26cd90ee6614b3ce09884eb53c0bd8566f9e70d55243c44b5a6
-
SHA512
fb731560a41f87420e632cc8992ff8f764904011c367d7c7290dc88ac76730de894bbd371bc9f27186b9577fe03f19463842a73b993d1b5f3a3bde631839f92b
-
SSDEEP
196608:A0RgGF79cVhrirDBFsYPVM6TWn7/m80aslB4ZJdDhpp0Bz6P2fAz1TPTYEtm96m5:XycYIDBKl7O80zlgJpJ0BI2fU3X0D5
Malware Config
Extracted
raccoon
717609e6131226f92ce8ce08c34305be
http://37.220.87.66/
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes:
73f8b780611ace51cb61c01975afe06c.bin.exepid process 3572 73f8b780611ace51cb61c01975afe06c.bin.exe 3572 73f8b780611ace51cb61c01975afe06c.bin.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
73f8b780611ace51cb61c01975afe06c.bin.exepid process 3572 73f8b780611ace51cb61c01975afe06c.bin.exe 3572 73f8b780611ace51cb61c01975afe06c.bin.exe