Analysis

  • max time kernel
    375s
  • max time network
    437s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24-12-2022 06:20

General

  • Target

    2911be45ad496dd1945f95c47b7f7738ad03849329fcec9c464dfaeb5081f67e.exe

  • Size

    55KB

  • MD5

    c5ce68e5feabffe94ce4309e9e278a91

  • SHA1

    ab272e68f0e09391e3675cf8cda344774ae98769

  • SHA256

    2911be45ad496dd1945f95c47b7f7738ad03849329fcec9c464dfaeb5081f67e

  • SHA512

    d3bf2ba058f75b4ecd2f371771ed516791fdd28a0bf2b7b2f6b4754db5f37aaf8f321d7d7e2319adb3de5ce7b7d64a647f63b1f9990ef4227918f3786a9d0d6b

  • SSDEEP

    1536:qzwshK8pUMGxo0xwwW9VemFMGfpbbVDRANyCa:wwshK8yMexbW9vJVDRANs

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2911be45ad496dd1945f95c47b7f7738ad03849329fcec9c464dfaeb5081f67e.exe
    "C:\Users\Admin\AppData\Local\Temp\2911be45ad496dd1945f95c47b7f7738ad03849329fcec9c464dfaeb5081f67e.exe"
    1⤵
      PID:1888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1888-120-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-121-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-122-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-123-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-124-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-125-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-126-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-127-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-128-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-131-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-130-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-132-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-129-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-133-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-134-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-136-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-138-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-140-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-139-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-137-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-142-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-143-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-141-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-135-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-144-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-146-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-145-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-147-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-149-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-150-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-152-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-153-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-151-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-148-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-154-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-155-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-156-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-157-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-158-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-159-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-160-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-161-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-164-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-163-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-165-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-162-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-166-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB

    • memory/1888-167-0x0000000077CB0000-0x0000000077E3E000-memory.dmp
      Filesize

      1.6MB