Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/02/2024, 21:59

General

  • Target

    acf5f22023b7d5d8922be39a0a9a02c6.exe

  • Size

    603KB

  • MD5

    acf5f22023b7d5d8922be39a0a9a02c6

  • SHA1

    7e27d6dd3038ac3e0e90ee175e97877d57178361

  • SHA256

    945f8ea6c8e20eeceb0101ec0f0fc5a4bfe95918dae47441145deb66acf8781f

  • SHA512

    f2ad262af2be78a4ab11dbb5411d3fdde596b92e6305cd1a7d3cd3caf2e58f31f8206c63603bf8d314ec0e467a59728d8040d6dfed40e4faab2ded8755d982d3

  • SSDEEP

    12288:dhDlOi4VgqcUQuV+epYa9+1pr36goHWUwXu7hTMMkShpLnq:n0i41P+I9+zWNVwe7aMkOc

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\acf5f22023b7d5d8922be39a0a9a02c6.exe
    "C:\Users\Admin\AppData\Local\Temp\acf5f22023b7d5d8922be39a0a9a02c6.exe"
    1⤵
      PID:1560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1560-1-0x00000000035D0000-0x00000000036D0000-memory.dmp

      Filesize

      1024KB

    • memory/1560-2-0x0000000005080000-0x0000000005113000-memory.dmp

      Filesize

      588KB

    • memory/1560-3-0x0000000000400000-0x0000000003333000-memory.dmp

      Filesize

      47.2MB

    • memory/1560-4-0x0000000000400000-0x0000000003333000-memory.dmp

      Filesize

      47.2MB

    • memory/1560-5-0x00000000035D0000-0x00000000036D0000-memory.dmp

      Filesize

      1024KB

    • memory/1560-7-0x0000000005080000-0x0000000005113000-memory.dmp

      Filesize

      588KB