Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/02/2024, 01:42

General

  • Target

    a520ea6015f3803beb565c77a86ee191.exe

  • Size

    529KB

  • MD5

    a520ea6015f3803beb565c77a86ee191

  • SHA1

    c3bc6c50204115b87445fab15a390ac9dc53e7e1

  • SHA256

    1b58fb93ddc43d49a182d8b3d367a6647c8c2a040459d4c43d5019c9dea5cf44

  • SHA512

    debaa30e20e4fc2dfe91aa720b531cfe2529e834018d4ca4b39c61ef92d458057889d84ce0a7b6e880fd9f0bf3bd89cfa856d33c070b3f30a029fb4decb1a3cf

  • SSDEEP

    12288:u0AkJ9TMnhtHWCORpvjoKxSPuogdjBoTY5UJj2v:dAkJuAvjtgjg1BoTY5ww

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a520ea6015f3803beb565c77a86ee191.exe
    "C:\Users\Admin\AppData\Local\Temp\a520ea6015f3803beb565c77a86ee191.exe"
    1⤵
      PID:1592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1592-1-0x0000000002470000-0x0000000002570000-memory.dmp

      Filesize

      1024KB

    • memory/1592-2-0x0000000002640000-0x00000000026CF000-memory.dmp

      Filesize

      572KB

    • memory/1592-3-0x0000000000400000-0x00000000023EE000-memory.dmp

      Filesize

      31.9MB

    • memory/1592-4-0x0000000000400000-0x00000000023EE000-memory.dmp

      Filesize

      31.9MB

    • memory/1592-6-0x0000000002470000-0x0000000002570000-memory.dmp

      Filesize

      1024KB

    • memory/1592-7-0x0000000002640000-0x00000000026CF000-memory.dmp

      Filesize

      572KB