Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 00:16

General

  • Target

    8ae74a97d04958e8ef77e18ffbc1f261.exe

  • Size

    483KB

  • MD5

    8ae74a97d04958e8ef77e18ffbc1f261

  • SHA1

    e412e85d70d2f8a709d73d5ad57d90f419f84d6f

  • SHA256

    d0d1589456c533d045c0b5a67c1145a5d80cc675273e200fb0a915be07bed591

  • SHA512

    37d9eabf108dd669d0c90cc3d50e9901247672010cc4206e6396a4799cffe8e6c60c2a37de50be8609a5f09c78f974d296250f5c159d226b05ea038b298b2982

  • SSDEEP

    6144:w8AQzxScKPvTt+Ob1pRqrm1lG1YUnunNcXcfVpFO4mBeymlAqOaRA+bd:McKzIObnnqn8lpYtJmKvsA+

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8ae74a97d04958e8ef77e18ffbc1f261.exe
    "C:\Users\Admin\AppData\Local\Temp\8ae74a97d04958e8ef77e18ffbc1f261.exe"
    1⤵
    • Modifies system certificate store
    PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2988-2-0x0000000002CB0000-0x0000000002D41000-memory.dmp

    Filesize

    580KB

  • memory/2988-1-0x0000000002DD0000-0x0000000002ED0000-memory.dmp

    Filesize

    1024KB

  • memory/2988-3-0x0000000000400000-0x0000000002CAF000-memory.dmp

    Filesize

    40.7MB

  • memory/2988-4-0x0000000000400000-0x0000000002CAF000-memory.dmp

    Filesize

    40.7MB

  • memory/2988-7-0x0000000002CB0000-0x0000000002D41000-memory.dmp

    Filesize

    580KB

  • memory/2988-6-0x0000000002DD0000-0x0000000002ED0000-memory.dmp

    Filesize

    1024KB