Analysis

  • max time kernel
    6s
  • max time network
    12s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    10-11-2020 11:36

General

  • Target

    85862161391878722a0bacf3d1bc637ed37dc57a2b14bd9aea3a2108bcc6400e.exe

  • Size

    514KB

  • MD5

    d0229fb1eab49a8995b94d93cb0593e4

  • SHA1

    c1aa688f65ff43a726f80b5e3e2c7f9233ba14f5

  • SHA256

    85862161391878722a0bacf3d1bc637ed37dc57a2b14bd9aea3a2108bcc6400e

  • SHA512

    eb880244cfe8fc5f67a69b3eadc5287d183578412e95d23f0aac16e763e35cd54cfcd37548b46a22855668dd85951663e6c0b8955e9c394bd6cd32339755f65f

Score
10/10

Malware Config

Signatures

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85862161391878722a0bacf3d1bc637ed37dc57a2b14bd9aea3a2108bcc6400e.exe
    "C:\Users\Admin\AppData\Local\Temp\85862161391878722a0bacf3d1bc637ed37dc57a2b14bd9aea3a2108bcc6400e.exe"
    1⤵
    • Modifies system certificate store
    PID:1740

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1740-0-0x00000000024A7000-0x00000000024A8000-memory.dmp
    Filesize

    4KB

  • memory/1740-1-0x0000000003E10000-0x0000000003E21000-memory.dmp
    Filesize

    68KB