Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/02/2024, 05:23

General

  • Target

    860ac5dd4958f1035cb2838a2f8bb2bd.exe

  • Size

    573KB

  • MD5

    860ac5dd4958f1035cb2838a2f8bb2bd

  • SHA1

    3392c1f7fadf491b7485971b513950e67283f52b

  • SHA256

    ffa0295fee41dd4363ec6c6541b9d52dc01a572c89790cd3cc0efbd4c8c0906a

  • SHA512

    e04571f2997d629d607d8050a88a7a53a0f90b552ab8171bb6d00a0da4624f9267d8763f5c9a6add342a6941b0d4c33547c727c5de7eac2d1775406f0213d70f

  • SSDEEP

    12288:iSf6XGL1XnGAaI4ZccKwJOxkkwHKYnp8EX6Sq4NPfWKI:riu1Xthw2wZp8EqSq4NPfQ

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\860ac5dd4958f1035cb2838a2f8bb2bd.exe
    "C:\Users\Admin\AppData\Local\Temp\860ac5dd4958f1035cb2838a2f8bb2bd.exe"
    1⤵
      PID:1856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1856-1-0x0000000000A90000-0x0000000000B90000-memory.dmp

      Filesize

      1024KB

    • memory/1856-2-0x0000000000B90000-0x0000000000C21000-memory.dmp

      Filesize

      580KB

    • memory/1856-3-0x0000000000400000-0x0000000000946000-memory.dmp

      Filesize

      5.3MB

    • memory/1856-4-0x0000000000400000-0x0000000000946000-memory.dmp

      Filesize

      5.3MB

    • memory/1856-6-0x0000000000A90000-0x0000000000B90000-memory.dmp

      Filesize

      1024KB

    • memory/1856-7-0x0000000000B90000-0x0000000000C21000-memory.dmp

      Filesize

      580KB