Analysis
-
max time kernel
40s -
max time network
40s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
-
submitted
23/03/2025, 20:32
General
-
Target
0.exe
-
Size
449KB
-
MD5
7b20f5c61780fe383f45ca6e18ed5a6a
-
SHA1
bc9bfd59f0cde312cd9a0d20784887fed9b8c836
-
SHA256
26ccbcb079b3f0cc183293351c40da3146d2ddec9b4d6cd314090cfab94834df
-
SHA512
8a63f6ad20fe18bd49d055ae05bc81fe30d0ebfb25a37428b17b43569b53bf2560f0de8f993f62a2f5d458db78e6d24ad71fca8d7fd1133d3cb499dff356e68b
-
SSDEEP
12288:r7fSQUrrX/pC2Hwxx/Pb1JTUPd0o7Vzl:rzynxmPrrTUPdL7VJ
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
4ea2de23519e3f57fa6e68e00db8cdfa44e74741
Attributes
-
url4cnc
https://telete.in/char0nsevenll
rc4.plain
rc4.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 5 IoCs
-
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0.exe"C:\Users\Admin\AppData\Local\Temp\0.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
576KB
-
Filesize
588KB
-
Filesize
1024KB
-
Filesize
576KB
-
Filesize
588KB
-
Filesize
46.9MB