raccoon | 93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa | Triage

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
15-01-2023 17:41

Sharing

Report Analysis Logs

General

Target

ad4fd710ab1f3cc38a49309d08fb4041.exe
Size

260KB
MD5

ad4fd710ab1f3cc38a49309d08fb4041
SHA1

4791cc5e959e6becca8cbdfd8cb34d10dc7cc8d2
SHA256

93bc72073b407b80d44a3c6851d6ec87ad50f4ee2110839468f4cab1fea4f0fa
SHA512

bcad2b652014f3bf55f6e82b4ed3cbf53edabe28c5dea2b4d10f20bd125f1b1e6bc178a4dddd58e60d2855d6c43aa56df0fc04efba9cd5ff896ea0fbbcf19a9d
SSDEEP

3072:/XWpKfn3oR5VD6mq3MwzcQlfsI2b6Ne7gMe5LRFYUEA7:vz3o5xShH2bMwUR

Score

10^/10

raccoon d87b51d1771107cfddb7c7acd7727950 stealer

Malware Config

Extracted

Family

raccoon

Botnet

d87b51d1771107cfddb7c7acd7727950

C2

http://195.133.40.9/

rc4.plain

Signatures

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

C:\Users\Admin\AppData\Local\Temp\ad4fd710ab1f3cc38a49309d08fb4041.exe
"C:\Users\Admin\AppData\Local\Temp\ad4fd710ab1f3cc38a49309d08fb4041.exe"
1⤵
PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1416-132-0x0000000002E8D000-0x0000000002E9E000-memory.dmp

Filesize
68KB

Download
memory/1416-133-0x0000000002E00000-0x0000000002E10000-memory.dmp

Filesize
64KB

Download
memory/1416-134-0x0000000000400000-0x0000000002BA9000-memory.dmp

Filesize
39.7MB

Download
memory/1416-135-0x0000000002E8D000-0x0000000002E9E000-memory.dmp

Filesize
68KB

Download