Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/02/2024, 23:29

General

  • Target

    aa6c64373bfb29fb164db6910694ba7f.exe

  • Size

    523KB

  • MD5

    aa6c64373bfb29fb164db6910694ba7f

  • SHA1

    d7b966f04fc08cfb594a36f8ccc1e1cfa8cfcd7b

  • SHA256

    50eb5a61eba2b5013458e4748e40f54832d8284ac049ab8281a4f3cc15971a86

  • SHA512

    2446806651c2f67447922d9ef00783f0da51b08291efd932df97e6850378c8bec509ae4eb87c34ca17f4479a7d5bd088ff5bda8cca23acf393b4945fccf917ba

  • SSDEEP

    12288:AXc0WK4Y5ihbDi1SHUQVBD/Cx0QCiekpJ9CqLjvL0:Ec0Yix0QCBS9f

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aa6c64373bfb29fb164db6910694ba7f.exe
    "C:\Users\Admin\AppData\Local\Temp\aa6c64373bfb29fb164db6910694ba7f.exe"
    1⤵
      PID:4332

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4332-1-0x00000000007E0000-0x00000000008E0000-memory.dmp

      Filesize

      1024KB

    • memory/4332-2-0x0000000000BA0000-0x0000000000C2F000-memory.dmp

      Filesize

      572KB

    • memory/4332-3-0x0000000000400000-0x0000000000569000-memory.dmp

      Filesize

      1.4MB

    • memory/4332-4-0x0000000000400000-0x0000000000569000-memory.dmp

      Filesize

      1.4MB

    • memory/4332-5-0x00000000007E0000-0x00000000008E0000-memory.dmp

      Filesize

      1024KB

    • memory/4332-7-0x0000000000BA0000-0x0000000000C2F000-memory.dmp

      Filesize

      572KB