Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/02/2024, 00:37

General

  • Target

    a5015ed7d25d74ca1d0f26a9b7e5eb86.exe

  • Size

    561KB

  • MD5

    a5015ed7d25d74ca1d0f26a9b7e5eb86

  • SHA1

    4ef99ce5ad010841ded00b3bccba99fc0a6b0881

  • SHA256

    32eb922eb910e3baa92dee051fcf8b3d93d597a8f83aa471c3501a3283459e7f

  • SHA512

    38aab68854399263d46dc35f16cf5675fc77ee588649c3954b2705f0012db13a8c88ae97145950f57537f64958c9f85e28807bd5463637fbb0ba63be2eaaa349

  • SSDEEP

    12288:XVhSdiZ0jHDsGdZUnX/M/Jy/YT3Toqx6DGL:3Ww0jkXUJmi4qL

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a5015ed7d25d74ca1d0f26a9b7e5eb86.exe
    "C:\Users\Admin\AppData\Local\Temp\a5015ed7d25d74ca1d0f26a9b7e5eb86.exe"
    1⤵
      PID:1164

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1164-1-0x0000000000AA0000-0x0000000000BA0000-memory.dmp

      Filesize

      1024KB

    • memory/1164-2-0x00000000009F0000-0x0000000000A83000-memory.dmp

      Filesize

      588KB

    • memory/1164-3-0x0000000000400000-0x0000000000943000-memory.dmp

      Filesize

      5.3MB

    • memory/1164-4-0x0000000000400000-0x0000000000943000-memory.dmp

      Filesize

      5.3MB

    • memory/1164-5-0x0000000000AA0000-0x0000000000BA0000-memory.dmp

      Filesize

      1024KB

    • memory/1164-7-0x00000000009F0000-0x0000000000A83000-memory.dmp

      Filesize

      588KB