Analysis
-
max time kernel
94s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-01-2025 11:05
Behavioral task
behavioral1
Sample
2025-01-24_5d240f41940cd0b8a9961dde6d60fc67_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-24_5d240f41940cd0b8a9961dde6d60fc67_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
Resource
win10v2004-20241007-en
General
-
Target
2025-01-24_5d240f41940cd0b8a9961dde6d60fc67_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe
-
Size
568KB
-
MD5
5d240f41940cd0b8a9961dde6d60fc67
-
SHA1
84ad8bd7cb8fc1d209f6dcec2245ae649eb54428
-
SHA256
5f88f34a4bd8734b1a7c055f3c2ccf946e282ce73ab2499ab9dafd8874dc0368
-
SHA512
d09d363162b9621d03dd5644e65236fbe2a40c5ff359504128abf58596580c8a355ceb7105a818e7ceb001c27cf9fc12c8b2d7ae9c9d6d2c7c0b2f7d0b8a74c4
-
SSDEEP
12288:z6fVjiGNqqxrWg3Rshu5TAkuxWF5aqNQap0bnimfmMc+:z6JVxr7RshQuxSl2fmy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2436 4028 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-24_5d240f41940cd0b8a9961dde6d60fc67_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-24_5d240f41940cd0b8a9961dde6d60fc67_avoslocker_cobalt-strike_luca-stealer_raccoonstealer.exe"1⤵PID:4028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 842⤵
- Program crash
PID:2436
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4028 -ip 40281⤵PID:1856