General
-
Target
390af7d0e1ccb0a68c5213dd0db33231.exe
-
Size
164KB
-
Sample
230714-h6mt9acf28
-
MD5
390af7d0e1ccb0a68c5213dd0db33231
-
SHA1
b3c0aeea6e661db163427e77f7f0bce76fac0e3e
-
SHA256
5ea2508d626f1060a23f8bcc6d113f1ea7508de0f8be144b7455eff451397549
-
SHA512
88d1cc14bcea9422a799ad87a717e7e810fd3015556c0fa2ada6c502a7b8848ef0e28bde2b0668bf38a549abc902a0c9c8623446594714bc685cb315395ad6a3
-
SSDEEP
3072:ECmGLoEu4RQF7F/2h18WiO68oWeWJXZMUx7Ltbj6Jh5vV+Yl:4GLoj4eF7F/k1piONneWHMUxftb4V+A
Static task
static1
Behavioral task
behavioral1
Sample
390af7d0e1ccb0a68c5213dd0db33231.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
390af7d0e1ccb0a68c5213dd0db33231.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
raccoon
6e489b600db6a7cfd6a1b65b9a5a61eb
http://5.78.111.161:8088/
Targets
-
-
Target
390af7d0e1ccb0a68c5213dd0db33231.exe
-
Size
164KB
-
MD5
390af7d0e1ccb0a68c5213dd0db33231
-
SHA1
b3c0aeea6e661db163427e77f7f0bce76fac0e3e
-
SHA256
5ea2508d626f1060a23f8bcc6d113f1ea7508de0f8be144b7455eff451397549
-
SHA512
88d1cc14bcea9422a799ad87a717e7e810fd3015556c0fa2ada6c502a7b8848ef0e28bde2b0668bf38a549abc902a0c9c8623446594714bc685cb315395ad6a3
-
SSDEEP
3072:ECmGLoEu4RQF7F/2h18WiO68oWeWJXZMUx7Ltbj6Jh5vV+Yl:4GLoj4eF7F/k1piONneWHMUxftb4V+A
-
Raccoon Stealer payload
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-