raccoon | c35c27c2223d56d08eaffddf1f3f7d944d8926900979c4846dc7cf885200a3f5

Analysis

max time kernel
147s
max time network
152s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29-01-2023 21:15

Target

c35c27c2223d56d08eaffddf1f3f7d944d8926900979c4846dc7cf885200a3f5.exe
Size

464KB
MD5

014f10ed852618edaa17000791a7a923
SHA1

e19fb616422a4d6300323bf2ef3605e6be186aa9
SHA256

c35c27c2223d56d08eaffddf1f3f7d944d8926900979c4846dc7cf885200a3f5
SHA512

189572d8534c32d5fac1aa7f96fcc0607376d99a36fcd967c562a3bce6dc0c41d8315524c54a3b01e738d73938ffc46d6fcd600459c7bff11b12616fa801ea58
SSDEEP

12288:D6cOYygt5RbxaOcdK6qUl2rsMpryEJeWxHyi:DFtkdK6qWGsIrjvxHh

Score

10^/10

Family

raccoon

Version

1.7.2

Botnet

a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes

rc4.plain

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer payload 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/956-57-0x0000000000870000-0x0000000000902000-memory.dmp	family_raccoon
behavioral1/memory/956-58-0x0000000000400000-0x000000000086D000-memory.dmp	family_raccoon

C:\Users\Admin\AppData\Local\Temp\c35c27c2223d56d08eaffddf1f3f7d944d8926900979c4846dc7cf885200a3f5.exe
"C:\Users\Admin\AppData\Local\Temp\c35c27c2223d56d08eaffddf1f3f7d944d8926900979c4846dc7cf885200a3f5.exe"
1⤵
PID:956

memory/956-55-0x00000000760E1000-0x00000000760E3000-memory.dmp

Filesize
8KB

Download
memory/956-56-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download
memory/956-57-0x0000000000870000-0x0000000000902000-memory.dmp

Filesize
584KB

Download
memory/956-58-0x0000000000400000-0x000000000086D000-memory.dmp

Filesize
4.4MB

Download
memory/956-59-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download