Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
26/02/2024, 19:08
Static task
static1
Behavioral task
behavioral1
Sample
a71e3429daa217bcab7a07275d955c62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a71e3429daa217bcab7a07275d955c62.exe
Resource
win10v2004-20240226-en
General
-
Target
a71e3429daa217bcab7a07275d955c62.exe
-
Size
580KB
-
MD5
a71e3429daa217bcab7a07275d955c62
-
SHA1
79ceefb0f9cfce5b7f86ff5f3d6ebaeac25bc0bd
-
SHA256
31f5e47457abeabc5d7fad47465885b4f3154106261db814fbc60ab5dbc4f82f
-
SHA512
1c1074a918f4ccb499874c8cae648cd15839b7bac048cd9c8ed4bc5e7d7f44dd3af581f8a8d93fa457571a9e65abb146bb063ec6daa4cab122cc12dff3659b07
-
SSDEEP
12288:zV4RhbWCFzZbnOrR+XV3lZTTvMhLkIbZOKrRhkSwgAnpJW:zS4CFzZbnRjTvwkIbZOKcSw
Malware Config
Extracted
raccoon
1.7.3
cd8dc1031358b1aec55cc6bc447df1018b068607
-
url4cnc
https://telete.in/jagressor_kz
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/2392-2-0x0000000000720000-0x00000000007B1000-memory.dmp family_raccoon_v1 behavioral2/memory/2392-3-0x0000000000400000-0x00000000004AC000-memory.dmp family_raccoon_v1 behavioral2/memory/2392-4-0x0000000000400000-0x00000000004AC000-memory.dmp family_raccoon_v1 behavioral2/memory/2392-7-0x0000000000720000-0x00000000007B1000-memory.dmp family_raccoon_v1