Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 07:50

General

  • Target

    88f6da211785d596af90571265f5cd62.exe

  • Size

    493KB

  • MD5

    88f6da211785d596af90571265f5cd62

  • SHA1

    999643fcbc76e120d2824b66d45d75bbb009a764

  • SHA256

    70dbf04d21096d4275b351c6209290e2f8b12299224ef26cefbe97579ca8d201

  • SHA512

    9924a2c7ac08a72ffaf7a69b4fd73d80cf7400bc2f5432d8d486c56129bfcd5092db0d6ff6aafca1346e582c50e77e05b3a0edf873e863d35c29b9be4b2b6354

  • SSDEEP

    6144:Y/MynBEM5cH+DFVLGwP0tcBm+6BOQ/ExOGavAku5wJUFdhLjTSdji7knGyHM:Y/MyBh5jFbvc1IQsxOGHkpJUF/PmiI

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 2 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\88f6da211785d596af90571265f5cd62.exe
    "C:\Users\Admin\AppData\Local\Temp\88f6da211785d596af90571265f5cd62.exe"
    1⤵
    • Modifies system certificate store
    PID:2372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2372-1-0x00000000002D0000-0x00000000003D0000-memory.dmp

    Filesize

    1024KB

  • memory/2372-2-0x00000000044D0000-0x0000000004563000-memory.dmp

    Filesize

    588KB

  • memory/2372-3-0x0000000000400000-0x0000000002CB2000-memory.dmp

    Filesize

    40.7MB

  • memory/2372-5-0x00000000002D0000-0x00000000003D0000-memory.dmp

    Filesize

    1024KB