Analysis

  • max time kernel
    30s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230621-en
  • resource tags

    arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
  • submitted
    22-06-2023 16:08

General

  • Target

    1db2259b0d11fa8ef8c85a8cafc37f9d.exe

  • Size

    331KB

  • MD5

    1db2259b0d11fa8ef8c85a8cafc37f9d

  • SHA1

    c59b9caa9526c297f834fd5fc840fc530c2c1f5b

  • SHA256

    d8559130616dcb860a123fd7228fda07563e4623efc4cc186fba1a695d8c83a2

  • SHA512

    7f0c7df90a92a662ec88323db8e6c520fd2809454d897a991b455daca0f1ba91d4a7874a742d33a86d39a1b4134aec9458c2b73b6a17197c0d0f47ee985417c8

  • SSDEEP

    6144:9A/8ic0HjmRESNERDFalTOkIRmL9n6lU2ycjC9mUWpzT:Xic0HK6SKJFKe+h

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1db2259b0d11fa8ef8c85a8cafc37f9d.exe
    "C:\Users\Admin\AppData\Local\Temp\1db2259b0d11fa8ef8c85a8cafc37f9d.exe"
    1⤵
      PID:2032

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2032-54-0x00000000001B0000-0x00000000001C5000-memory.dmp

      Filesize

      84KB

    • memory/2032-55-0x00000000001D0000-0x00000000001DE000-memory.dmp

      Filesize

      56KB

    • memory/2032-56-0x0000000000400000-0x00000000004DF000-memory.dmp

      Filesize

      892KB