Overview
overview
10Static
static
Raccine/ya...32.exe
windows10_x64
6Raccine/ya...64.exe
windows10_x64
1Raccine/ya...32.exe
windows10_x64
1Raccine/ya...64.exe
windows10_x64
1Raccine/Raccine.exe
windows10_x64
10Raccine/Ra...fg.exe
windows10_x64
1Raccine/Ra...nc.exe
windows10_x64
1Raccine/Ra...gs.exe
windows10_x64
1Raccine/Ra...86.exe
windows10_x64
10Raccine/in...ne.bat
windows10_x64
8Raccine/pr...NU.exe
windows10_x64
8Raccine/pr...64.exe
windows10_x64
8Raccine/pr...86.exe
windows10_x64
7Raccine/sc...ng.bat
windows10_x64
1Analysis
-
max time kernel
361s -
max time network
455s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
06-08-2021 11:49
Static task
static1
Behavioral task
behavioral1
Sample
Raccine/yara/yara32.exe
Resource
win10v20210408
Behavioral task
behavioral2
Sample
Raccine/yara/yara64.exe
Resource
win10v20210408
Behavioral task
behavioral3
Sample
Raccine/yara/yarac32.exe
Resource
win10v20210410
Behavioral task
behavioral4
Sample
Raccine/yara/yarac64.exe
Resource
win10v20210408
Behavioral task
behavioral5
Sample
Raccine/Raccine.exe
Resource
win10v20210410
Behavioral task
behavioral6
Sample
Raccine/RaccineElevatedCfg.exe
Resource
win10v20210410
Behavioral task
behavioral7
Sample
Raccine/RaccineRulesSync.exe
Resource
win10v20210408
Behavioral task
behavioral8
Sample
Raccine/RaccineSettings.exe
Resource
win10v20210410
Behavioral task
behavioral9
Sample
Raccine/Raccine_x86.exe
Resource
win10v20210408
Behavioral task
behavioral10
Sample
Raccine/install-raccine.bat
Resource
win10v20210410
Behavioral task
behavioral11
Sample
Raccine/preqeq/NDP462-KB3151800-x86-x64-AllOS-ENU.exe
Resource
win10v20210408
Behavioral task
behavioral12
Sample
Raccine/preqeq/vc_redist.x64.exe
Resource
win10v20210410
Behavioral task
behavioral13
Sample
Raccine/preqeq/vc_redist.x86.exe
Resource
win10v20210408
Behavioral task
behavioral14
Sample
Raccine/scripts/windows-hardening.bat
Resource
win10v20210410
General
-
Target
Raccine/RaccineSettings.exe
-
Size
96KB
-
MD5
29befacee533f2fefb428c39412df12c
-
SHA1
179545ba0f23a84ec2506fb743d5c9d3d0408f3a
-
SHA256
ec15047f8a802cf6cadb5ea3860c380bb3314e9a91a96464dc1837192773ab6a
-
SHA512
51e518494c892e40107154368976f5c83081d19684473a619eb86376652bba684036e8c91a705f78f1bdbb0c47b16559ce0d1412fcd45f41800d7dac2d512e2d
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
RaccineSettings.exepid process 4024 RaccineSettings.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
RaccineSettings.exedescription pid process Token: SeDebugPrivilege 4024 RaccineSettings.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
RaccineSettings.exepid process 4024 RaccineSettings.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
RaccineSettings.exepid process 4024 RaccineSettings.exe