Overview

overview

10

Static

static

3

685aa74639...39.exe

windows7-x64

10

685aa74639...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    685aa74639245cdc3a55e428c66ae039.exe

  • Size

    271KB

  • Sample

    230624-f52wnsbc6x

  • MD5

    685aa74639245cdc3a55e428c66ae039

  • SHA1

    2161cdd7f8305481a092e39798c9140b248664d4

  • SHA256

    e11f3e5a187ddbb67ea48d2f9a97b088355ebccc5e3de9299c84a8d38b5b32a9

  • SHA512

    ac483ef30469276c178242760170398781f2294d2aa35080f5d793055ddf3c992fd179899033a5ab72ceb16bb5c63a2d35b9e3a6f7a10f97e122118800506c60

  • SSDEEP

    3072:P/1yPYb/4iPS+A3TRa6x/oDhDO14WbzG6DfOtYPBYzpeEgL2H7sA:PAPYbwipA3TRaIODOH5zzJYkN6

Score
10/10
raccoondiscoveryspywarestealer

Malware Config

Targets

    • Target

      685aa74639245cdc3a55e428c66ae039.exe

    • Size

      271KB

    • MD5

      685aa74639245cdc3a55e428c66ae039

    • SHA1

      2161cdd7f8305481a092e39798c9140b248664d4

    • SHA256

      e11f3e5a187ddbb67ea48d2f9a97b088355ebccc5e3de9299c84a8d38b5b32a9

    • SHA512

      ac483ef30469276c178242760170398781f2294d2aa35080f5d793055ddf3c992fd179899033a5ab72ceb16bb5c63a2d35b9e3a6f7a10f97e122118800506c60

    • SSDEEP

      3072:P/1yPYb/4iPS+A3TRa6x/oDhDO14WbzG6DfOtYPBYzpeEgL2H7sA:PAPYbwipA3TRaIODOH5zzJYkN6

    Score
    10/10
    raccoondiscoveryspywarestealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks