Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 05:23

General

  • Target

    860ac5dd4958f1035cb2838a2f8bb2bd.exe

  • Size

    573KB

  • MD5

    860ac5dd4958f1035cb2838a2f8bb2bd

  • SHA1

    3392c1f7fadf491b7485971b513950e67283f52b

  • SHA256

    ffa0295fee41dd4363ec6c6541b9d52dc01a572c89790cd3cc0efbd4c8c0906a

  • SHA512

    e04571f2997d629d607d8050a88a7a53a0f90b552ab8171bb6d00a0da4624f9267d8763f5c9a6add342a6941b0d4c33547c727c5de7eac2d1775406f0213d70f

  • SSDEEP

    12288:iSf6XGL1XnGAaI4ZccKwJOxkkwHKYnp8EX6Sq4NPfWKI:riu1Xthw2wZp8EqSq4NPfQ

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\860ac5dd4958f1035cb2838a2f8bb2bd.exe
    "C:\Users\Admin\AppData\Local\Temp\860ac5dd4958f1035cb2838a2f8bb2bd.exe"
    1⤵
    • Modifies system certificate store
    PID:2656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2656-1-0x00000000002B0000-0x00000000003B0000-memory.dmp

    Filesize

    1024KB

  • memory/2656-2-0x00000000009C0000-0x0000000000A51000-memory.dmp

    Filesize

    580KB

  • memory/2656-3-0x0000000000400000-0x0000000000946000-memory.dmp

    Filesize

    5.3MB

  • memory/2656-6-0x00000000002B0000-0x00000000003B0000-memory.dmp

    Filesize

    1024KB

  • memory/2656-7-0x00000000009C0000-0x0000000000A51000-memory.dmp

    Filesize

    580KB