Analysis
- max time kernel
146s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
09/03/2024, 23:38
General
- Target bd1a2b21480607e6cfbaa32fdde275e7.exe
- Size 585KB
- Sample240309-3ms75sef4t
- SHA256 214df5507adf45f0a1e026b06a234bae33ddffc81826462c426240cf2c709672
Score
10/10
Malware Config
Extracted
Family
-
raccoon
Version
-
1.7.3
Botnet
-
10bc5b7806cc7aaf6166eff675bfbefb21205737
Attributes
-
url4cnc
https://telete.in/hi3krasav4ik
rc4.plain
rc4.plain
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Raccoon Stealer V1 payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd1a2b21480607e6cfbaa32fdde275e7.exe"C:\Users\Admin\AppData\Local\Temp\bd1a2b21480607e6cfbaa32fdde275e7.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3180-1-0x0000000000680000-0x0000000000780000-memory.dmp
memory/3180-2-0x0000000002220000-0x00000000022B3000-memory.dmp
memory/3180-3-0x0000000000400000-0x00000000004AD000-memory.dmp
memory/3180-4-0x0000000000400000-0x00000000004AD000-memory.dmp
memory/3180-6-0x0000000000680000-0x0000000000780000-memory.dmp
memory/3180-7-0x0000000002220000-0x00000000022B3000-memory.dmp