Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/12/2023, 11:45
Static task
static1
Behavioral task
behavioral1
Sample
1720fc84893c5c7f4ba560a42402ba9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1720fc84893c5c7f4ba560a42402ba9f.exe
Resource
win10v2004-20231215-en
General
-
Target
1720fc84893c5c7f4ba560a42402ba9f.exe
-
Size
555KB
-
MD5
1720fc84893c5c7f4ba560a42402ba9f
-
SHA1
35f6fcdff9e8e3df12b3f00a7df86b1c4a3f6c6c
-
SHA256
305b99b092546a344bb34798814e5fd94a042f9d5675e7433576b4c6989f92cf
-
SHA512
d197680efe16d9544c71dba5289c4291477164e9f4d7030485bceb0c25ba1c4b6b52f4d712be921678a5a75cc9b8dc4060b0b4e0715c91af96548fbb1fcb8b93
-
SSDEEP
12288:XsqAh/K8Mey2xTiTnJR+VozqZylARlUxSP7tnwoL65zxd6Ls:XCh/K8MiiTJQoqFlUxcuoCL6Ls
Malware Config
Extracted
raccoon
1.8.1
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/4612-2-0x0000000000570000-0x0000000000600000-memory.dmp family_raccoon_v1 behavioral2/memory/4612-3-0x0000000000400000-0x0000000000497000-memory.dmp family_raccoon_v1 behavioral2/memory/4612-4-0x0000000000400000-0x0000000000497000-memory.dmp family_raccoon_v1 behavioral2/memory/4612-7-0x0000000000570000-0x0000000000600000-memory.dmp family_raccoon_v1