Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 01:33

General

  • Target

    88337815ca9738ea5df7f734a7ae4dc6.exe

  • Size

    522KB

  • MD5

    88337815ca9738ea5df7f734a7ae4dc6

  • SHA1

    89a47da6d37de3cec41a81739f2ff4b173763e1d

  • SHA256

    de3c93fe49775276393b43a5e39d71b9ade06756977134f2b7ec0204def6b374

  • SHA512

    b8dc6f53dd006174d96b0c778c157a3b884b3d38f2b08b352b8ad93b1643cdc91b3a31f97344933253e6f437ef407c866293b02c1f49153fcad44342e278f784

  • SSDEEP

    12288:6rqTJbk0kmr/3oO/LNDqROP1JaVYPqS5bQu+bll99kJq:Dbvkst/LNaw1JjPqmF+B79kI

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\88337815ca9738ea5df7f734a7ae4dc6.exe
    "C:\Users\Admin\AppData\Local\Temp\88337815ca9738ea5df7f734a7ae4dc6.exe"
    1⤵
    • Modifies system certificate store
    PID:1628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1628-2-0x0000000002460000-0x00000000024EF000-memory.dmp

    Filesize

    572KB

  • memory/1628-1-0x00000000002D0000-0x00000000003D0000-memory.dmp

    Filesize

    1024KB

  • memory/1628-3-0x0000000000400000-0x00000000023ED000-memory.dmp

    Filesize

    31.9MB

  • memory/1628-4-0x0000000000400000-0x00000000023ED000-memory.dmp

    Filesize

    31.9MB

  • memory/1628-6-0x00000000002D0000-0x00000000003D0000-memory.dmp

    Filesize

    1024KB

  • memory/1628-7-0x0000000002460000-0x00000000024EF000-memory.dmp

    Filesize

    572KB