Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-12-2024 14:37
General
-
Target
efd643ac7526627abf920842a3b2d6e9c4db4f1496dc924d879b45cf976b434a.exe
-
Size
743KB
-
MD5
6167808c3befb6ea081d4cb2d1caf6f2
-
SHA1
2564a82d969a6a9befa8fe81fd46c8a3abbd78fb
-
SHA256
efd643ac7526627abf920842a3b2d6e9c4db4f1496dc924d879b45cf976b434a
-
SHA512
fe173bb98a2bda1fd75630ca4dc7bfd7dbf9113d287324feb35d9fe27299deea4027847728e8bd46d71921d15e29d0fb869cc9134ec65f6bcafd77d3a15a1be4
-
SSDEEP
12288:N/1tTk46QbqKYT7PCsj9wptoOgIBbh5MpUAvRfJc0dT+k9h23XBDjGPA7G:N9xn628P9j0WOgIJh5M9JcKKk99PA7
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
afb5c633c4650f69312baef49db9dfa4
C2
http://193.56.146.177
Attributes
-
user_agent
mozzzzzzzzzzz
xor.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\efd643ac7526627abf920842a3b2d6e9c4db4f1496dc924d879b45cf976b434a.exe"C:\Users\Admin\AppData\Local\Temp\efd643ac7526627abf920842a3b2d6e9c4db4f1496dc924d879b45cf976b434a.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
768KB