Overview

overview

10

Static

static

10

1476-56-0x...ry.exe

windows7-x64

1

1476-56-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1476-56-0x0000000000400000-0x000000000047E000-memory.dmp

  • Size

    504KB

  • Sample

    240314-rrjcysed6w

  • MD5

    102f34afeaaa3622f30810ff71d66bfa

  • SHA1

    75f46f30dc6647bdd40eba14a0a23af42885e3ae

  • SHA256

    5917e86cd9c591f4bdcf6367661a725d0f6b2229d7255650145a6cfe5470cda1

  • SHA512

    d8ba9ff8625376e0b3be97ff574ba8a469ac89518f151a6967e1c5f38d9270c0be9ad7b0d99598823e1bebdd358995fb213e6a6e90ce1b9de9ab170f60d19149

  • SSDEEP

    3072:YyCf1nX/DBQ67rlMQ5kgN0LucGuW0d3504K/:Y19X/d77q5gN0CjRw04K

Score
10/10
raccoon6bb5fbdb7121bc7ea628330bef79c129

Malware Config

Extracted

Family

raccoon

Botnet

6bb5fbdb7121bc7ea628330bef79c129

C2

http://5.78.78.150:8088/

Attributes
  • user_agent

    DuckTales

xor.plain

Targets

    • Target

      1476-56-0x0000000000400000-0x000000000047E000-memory.dmp

    • Size

      504KB

    • MD5

      102f34afeaaa3622f30810ff71d66bfa

    • SHA1

      75f46f30dc6647bdd40eba14a0a23af42885e3ae

    • SHA256

      5917e86cd9c591f4bdcf6367661a725d0f6b2229d7255650145a6cfe5470cda1

    • SHA512

      d8ba9ff8625376e0b3be97ff574ba8a469ac89518f151a6967e1c5f38d9270c0be9ad7b0d99598823e1bebdd358995fb213e6a6e90ce1b9de9ab170f60d19149

    • SSDEEP

      3072:YyCf1nX/DBQ67rlMQ5kgN0LucGuW0d3504K/:Y19X/d77q5gN0CjRw04K

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks