Analysis
-
max time kernel
25s -
max time network
27s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
-
submitted
07-01-2024 18:58
General
-
Target
raccon.exe
-
Size
565KB
-
MD5
58471a5a6454e76313cb17ef007358f7
-
SHA1
fe7a637e08974fc3ba4a6f86fec924ce31347539
-
SHA256
8710679cc4055b4ed025b3be8a9b248a3ca457cf95673b31fcd7865669e49bcf
-
SHA512
e82f23cfcf0179c5ca731a676eea950935f52b966990446e53c35587253ef6899891b19652150438341a88c243b0bde4b4efd347485e13d5f86eef4c9c5d1cea
-
SSDEEP
6144:ubSe3uM6N1VXaEa2AzTkb0xLWay+B2SlZY2TJEyZwFhbQtFFftG5x6nAg9/t1KHb:SSe3p6NGLBf2SfZYbSFltG58nAnbcc9
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
17ac5bf38b1a6b1d4173afdd8ddb90cf
C2
http://176.113.115.213:80/
Attributes
-
user_agent
SunShineMoonLight
xor.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V2 payload 3 IoCs
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\raccon.exe"C:\Users\Admin\AppData\Local\Temp\raccon.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 164 -s 97202⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 164 -s 97122⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
156KB
-
Filesize
588KB
-
Filesize
588KB