Analysis
- max time kernel
146s - max time network
241s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
26/02/2024, 17:40
General
- Target Set-up.exe
- Size 783.5MB
- Sample240226-v816wace6w
- SHA256 f896215e54c50c31e50cd32fa46425c56a26cc89397d68ad2166e1dc399ffd43
Malware Config
Extracted
-
raccoon
-
5705cf455d54ce026eb2bfe61ead11fc
-
http://193.233.132.15:80
-
user_agent
MrBidenNeverKnow
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Raccoon Stealer V2 payload 5 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Set-up.exe"C:\Users\Admin\AppData\Local\Temp\Set-up.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3812-0-0x0000000000400000-0x00000000011F9000-memory.dmp
memory/3812-5-0x0000000000400000-0x00000000011F9000-memory.dmp
memory/3812-6-0x0000000001250000-0x0000000001251000-memory.dmp
memory/3812-7-0x0000000001360000-0x0000000001361000-memory.dmp
memory/3812-8-0x00000000017F0000-0x00000000017F1000-memory.dmp
memory/3812-11-0x0000000001820000-0x0000000001821000-memory.dmp
memory/3812-10-0x0000000001810000-0x0000000001811000-memory.dmp
memory/3812-9-0x0000000001800000-0x0000000001801000-memory.dmp
memory/3812-12-0x0000000000400000-0x00000000011F9000-memory.dmp
memory/3812-13-0x0000000000400000-0x00000000011F9000-memory.dmp
memory/3812-14-0x0000000000400000-0x00000000011F9000-memory.dmp