Analysis
-
max time kernel
116s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
26-08-2024 13:09
General
-
Target
533627f07841ccfd8c96140ea5e15e90N.exe
-
Size
529KB
-
MD5
533627f07841ccfd8c96140ea5e15e90
-
SHA1
9b5b372486ef3a43778d1866c52c2ad196eaefd9
-
SHA256
5949273ce1505d6f4614171f4bacddd94e01b0ecfbf962bf04e9ba8ee3e66efb
-
SHA512
bf11bbc8c1bae3256141a5267a14c6ff36ca6eb3a91e9f791b2732c7cffddaac4becd965470f85bc38834f332b60ff0d39641ff35dfab20937263fca7cb830e8
-
SSDEEP
12288:v+hf4gCqWzZzfm3s9q7xC5cbnRdkMuHknxA33Y:of4Xw32q1uu/56
Score
10/10
Malware Config
Extracted
Family
raccoon
Version
1.7.3
Botnet
5339a5db91bba8fa758672b05e7eb691a224bf94
Attributes
-
url4cnc
https://tttttt.me/jagressor_kz
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\533627f07841ccfd8c96140ea5e15e90N.exe"C:\Users\Admin\AppData\Local\Temp\533627f07841ccfd8c96140ea5e15e90N.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
580KB
-
Filesize
584KB
-
Filesize
584KB
-
Filesize
1024KB
-
Filesize
580KB