Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
27/02/2024, 08:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a8b90c40140aa2e6115ee8f22c17068e.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a8b90c40140aa2e6115ee8f22c17068e.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
- Target a8b90c40140aa2e6115ee8f22c17068e.exe
- Size 583KB
- Sample240227-km338sdb5w
- SHA256 4b22fbc08005b6448d015e25cd97245df4bb1c2731c13db78afef37ee9ff020d
- MD5 a8b90c40140aa2e6115ee8f22c17068e
- SHA1 89ecce8c3e112c0a5bb55774cae903cece0b8a7c
- SHA512 308a69f53fc185de8cb15d186135e21474f58dd6a871b0bbf1f1dfdb4e8e1d381327e09b0f59e9cc60892051a08a72b8c2d2e3a1f0677717b4e04603dad646d2
- SSDEEP 12288:rOI5LUbbmMdkEPqrwbjYK6eMygPSMdnc6vx1PBCPE3nSZ8zRaC62:/UbbmMXgEXgPSMdnvPP8PswC
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
raccoon
Version
-
1.7.3
Botnet
-
b5998c5938c0648ce1e41086dc9f3e22ac1750bd
Attributes
-
url4cnc
https://telete.in/forkmaster123
rc4.plain
rc4.plain
Signatures
- Raccoon Stealer V1 payload 3 IoCs
resource yara_rule behavioral2/memory/2316-2-0x00000000021F0000-0x0000000002283000-memory.dmp family_raccoon_v1 behavioral2/memory/2316-3-0x0000000000400000-0x00000000004AE000-memory.dmp family_raccoon_v1 behavioral2/memory/2316-7-0x00000000021F0000-0x0000000002283000-memory.dmp family_raccoon_v1