Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/02/2024, 16:41

General

  • Target

    a6d4d311d3c00a0b343f4585375d06a8.exe

  • Size

    434KB

  • MD5

    a6d4d311d3c00a0b343f4585375d06a8

  • SHA1

    0a5184306f03992a1275eadf511f29d55478fa2e

  • SHA256

    5e97b63b5e06af7693cf6603d48ab68101a18b0c6d72b837d320e891e1597ea0

  • SHA512

    3664c24c02fc3f9bbedd919b9021037bd0769de100d5bc83d5b02c22a6db8a079d32b876525d17f5eee8a60751c695f814234ec85f1932f00c4ff7be440555d8

  • SSDEEP

    12288:G2P1O3tIwQP963E1In4ymtVMiVjGEAtXoy:5P1UIwdEKnBoVcGy

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a6d4d311d3c00a0b343f4585375d06a8.exe
    "C:\Users\Admin\AppData\Local\Temp\a6d4d311d3c00a0b343f4585375d06a8.exe"
    1⤵
      PID:4800

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4800-1-0x0000000000960000-0x0000000000A60000-memory.dmp

      Filesize

      1024KB

    • memory/4800-2-0x0000000000DA0000-0x0000000000E31000-memory.dmp

      Filesize

      580KB

    • memory/4800-3-0x0000000000400000-0x00000000008D6000-memory.dmp

      Filesize

      4.8MB

    • memory/4800-4-0x0000000000400000-0x00000000008D6000-memory.dmp

      Filesize

      4.8MB

    • memory/4800-5-0x0000000000960000-0x0000000000A60000-memory.dmp

      Filesize

      1024KB

    • memory/4800-7-0x0000000000DA0000-0x0000000000E31000-memory.dmp

      Filesize

      580KB