raccoon | 305b99b092546a344bb34798814e5fd94a042f9d5675e7433576b4c6989f92cf

Analysis

max time kernel
146s
max time network
148s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 11:45

Target

1720fc84893c5c7f4ba560a42402ba9f.exe
Size

555KB
MD5

1720fc84893c5c7f4ba560a42402ba9f
SHA1

35f6fcdff9e8e3df12b3f00a7df86b1c4a3f6c6c
SHA256

305b99b092546a344bb34798814e5fd94a042f9d5675e7433576b4c6989f92cf
SHA512

d197680efe16d9544c71dba5289c4291477164e9f4d7030485bceb0c25ba1c4b6b52f4d712be921678a5a75cc9b8dc4060b0b4e0715c91af96548fbb1fcb8b93
SSDEEP

12288:XsqAh/K8Mey2xTiTnJR+VozqZylARlUxSP7tnwoL65zxd6Ls:XCh/K8MiiTJQoqFlUxcuoCL6Ls

Score

10^/10

Family

raccoon

Version

1.8.1

Botnet

f6d7183c9e82d2a9b81e6c0608450aa66cefb51f

Attributes

rc4.plain

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer V1 payload 3 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1128-2-0x00000000002C0000-0x0000000000350000-memory.dmp	family_raccoon_v1
behavioral1/memory/1128-3-0x0000000000400000-0x0000000000497000-memory.dmp	family_raccoon_v1
behavioral1/memory/1128-7-0x00000000002C0000-0x0000000000350000-memory.dmp	family_raccoon_v1

C:\Users\Admin\AppData\Local\Temp\1720fc84893c5c7f4ba560a42402ba9f.exe
"C:\Users\Admin\AppData\Local\Temp\1720fc84893c5c7f4ba560a42402ba9f.exe"
1⤵
PID:1128

memory/1128-1-0x0000000000530000-0x0000000000630000-memory.dmp

Filesize
1024KB

Download
memory/1128-2-0x00000000002C0000-0x0000000000350000-memory.dmp

Filesize
576KB

Download
memory/1128-3-0x0000000000400000-0x0000000000497000-memory.dmp

Filesize
604KB

Download
memory/1128-6-0x0000000000530000-0x0000000000630000-memory.dmp

Filesize
1024KB

Download
memory/1128-7-0x00000000002C0000-0x0000000000350000-memory.dmp

Filesize
576KB

Download