Analysis
-
max time kernel
110s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-01-2025 23:07
General
-
Target
71c1d7a181f5445ab7ee6ec74babff07f19f5252c4a66b25aef457d7b395fcd5.exe
-
Size
526KB
-
MD5
582ed6d6b37ee73e340659062e64e4cb
-
SHA1
7292c49be64f0c953c85fad160b604c4d939c9ca
-
SHA256
71c1d7a181f5445ab7ee6ec74babff07f19f5252c4a66b25aef457d7b395fcd5
-
SHA512
b42b08e6bbe2c4e1d32525dde75e15ab128b6a011950dab9676e4a8972201c589c67314ce76e403db05de6795a9d451b72f5fe8bd2a4ca9fba144fa7af23e7b1
-
SSDEEP
12288:+nvTIHIhemwLoH0i6oAxxEU47y73xLUoRBk:8KqemXHJ6hxEbYY6Bk
Malware Config
Extracted
raccoon
284afed1ba08a8b7058c820fea5bc8119c8f5c4a
-
url4cnc
http://103.155.93.247/nixsmasterbaks2
https://t.me/nixsmasterbaks2
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 6 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\71c1d7a181f5445ab7ee6ec74babff07f19f5252c4a66b25aef457d7b395fcd5.exe"C:\Users\Admin\AppData\Local\Temp\71c1d7a181f5445ab7ee6ec74babff07f19f5252c4a66b25aef457d7b395fcd5.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
584KB
-
Filesize
588KB
-
Filesize
1024KB
-
Filesize
584KB
-
Filesize
696KB
-
Filesize
588KB
-
Filesize
696KB