Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
- submitted
05/02/2024, 16:56
General
- Target 9285a1c0dbf92a78a6713737212aed91.exe
- Size 494KB
- Sample240205-vf1pmscef3
- SHA256 8479e32accbe426f52dad5e593818e099339dd4be2a8cad0a413ae60b2b9c395
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Version
-
1.7.3
Botnet
-
16a39305e75d7034b96e725c3f1dd72b36d25c64
Attributes
-
url4cnc
https://telete.in/hi3krasav4ik
rc4.plain
rc4.plain
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Raccoon Stealer V1 payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9285a1c0dbf92a78a6713737212aed91.exe"C:\Users\Admin\AppData\Local\Temp\9285a1c0dbf92a78a6713737212aed91.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2680-1-0x0000000000570000-0x0000000000670000-memory.dmp
memory/2680-2-0x00000000021F0000-0x0000000002283000-memory.dmp
memory/2680-3-0x0000000000400000-0x0000000000496000-memory.dmp
memory/2680-4-0x0000000000400000-0x0000000000496000-memory.dmp
memory/2680-5-0x0000000000570000-0x0000000000670000-memory.dmp
memory/2680-7-0x00000000021F0000-0x0000000002283000-memory.dmp