Overview

overview

10

Static

static

10

2656-23-0x...ry.exe

windows7-x64

1

2656-23-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2656-23-0x0000000000400000-0x000000000085E000-memory.dmp

  • Size

    4.4MB

  • Sample

    231210-tc67ksgha8

  • MD5

    f2e4dccadca01ba799a4ed29d36d2d65

  • SHA1

    25d8a513955cf3488ac6bc6a68405459086c792e

  • SHA256

    a29c00aa96d1bc406a1dd95ebd3a43c3730491c37e0abd27d6b62ac66550f73a

  • SHA512

    e55950be6bd1abd4b1fe9655aca9a679adb23a995d0cc557836cf34a4ecc6019ee894885360fa7e9f5a48090eb21424c985608a1a488016bdd715fa979a2a8d4

  • SSDEEP

    3072:9PI6GWpeVsXCLMrxbQ0puFqHKE2b4pFVqmkStswH9pQURRVhpHUZ5OeTC8L:9P8WwesMrJQ0pmKkmH39pQU1PHU3T

Score
10/10
raccoon02715ba03fc9d768ba977c72db990ef6

Malware Config

Extracted

Family

raccoon

Botnet

02715ba03fc9d768ba977c72db990ef6

C2

http://193.233.132.30:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      2656-23-0x0000000000400000-0x000000000085E000-memory.dmp

    • Size

      4.4MB

    • MD5

      f2e4dccadca01ba799a4ed29d36d2d65

    • SHA1

      25d8a513955cf3488ac6bc6a68405459086c792e

    • SHA256

      a29c00aa96d1bc406a1dd95ebd3a43c3730491c37e0abd27d6b62ac66550f73a

    • SHA512

      e55950be6bd1abd4b1fe9655aca9a679adb23a995d0cc557836cf34a4ecc6019ee894885360fa7e9f5a48090eb21424c985608a1a488016bdd715fa979a2a8d4

    • SSDEEP

      3072:9PI6GWpeVsXCLMrxbQ0puFqHKE2b4pFVqmkStswH9pQURRVhpHUZ5OeTC8L:9P8WwesMrJQ0pmKkmH39pQU1PHU3T

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks