Analysis
-
max time kernel
88s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
01-07-2023 06:27
General
-
Target
12333exe.exe
-
Size
6.6MB
-
MD5
900d27e6128c54af6b69cf16612ef16b
-
SHA1
e21cfcd4e5767612b050ae2fed4868480af4ea1a
-
SHA256
01e388da881c2c5b5689b1c9919ee092ffd24b269e5760159c75b5478d1e4b58
-
SHA512
d4e7feedbe5294093ca4bab47c1285e3bfec493e4fd93289b355e2e056b486fe3addaa132cb03d9db86367a24d8b9129a172d1588c3bbe6abed4cbbbf67ddc5f
-
SSDEEP
98304:j/GdnxlHE7MJ5ugeMaobWs8DkGYUESUpXM1juz6yY2a179kP7ePKO:adfB7ufbobWPhXUN4I1ah9eG
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
960d8047e2829c4b87de991d706e2490
C2
http://94.142.138.37/
xor.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer payload 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12333exe.exe"C:\Users\Admin\AppData\Local\Temp\12333exe.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
10.2MB