Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
28/02/2024, 23:41
General
-
Target
ad27a4a0759fa8524c7b2ae0bc04d99f.exe
-
Size
5.6MB
-
MD5
ad27a4a0759fa8524c7b2ae0bc04d99f
-
SHA1
eb04a65d51eccc9f3e2a3b28d62f32aa4cb1c325
-
SHA256
c3d78c820dfbb815343f14176f17c972959b1ffde0284b5774e090b29e6efd0a
-
SHA512
cb4a0d44218dfbf81e841c7c962210f5f359c2f2e228f75bb4bd11402bd96962264015340fb2016345b84df9bd481120421ed38296236cb02c10762ca72b853f
-
SSDEEP
98304:4n7vosEUhxtKo7rfHPYtZQosjFlIlIA1RzDamAIxAZX01AOg1dlVn7JkjQFtfW8d:4n7osNtKej44LIRxqX06Oen7y0hdU
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad27a4a0759fa8524c7b2ae0bc04d99f.exe"C:\Users\Admin\AppData\Local\Temp\ad27a4a0759fa8524c7b2ae0bc04d99f.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.3MB
-
Filesize
4KB
-
Filesize
9.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.3MB