Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
28/02/2024, 15:06
General
-
Target
ac2cbac54f9d8388529b12a727d4e441.exe
-
Size
5.2MB
-
MD5
ac2cbac54f9d8388529b12a727d4e441
-
SHA1
76b8ae3e5996241ca1b4f378e3418125b894032c
-
SHA256
bc458042cf51dca5781a9e1da79b5a40103dcdd3b12496321cfdaf13ce85c93c
-
SHA512
2aa65e051e85afe221bea0cceaab938949d7f06dea0ee2fc638c78c2bbc344a1e5e639a1fc3d7c136ce2ab43a61a7162a9da3e8df82462955214b3dbcafad46f
-
SSDEEP
98304:aT6Fnxh0AGsqUunZoQtc0HhADH6DXWVyJAOp6N8gA5bO:ok5bbuaOVHWT6b9JXpNg+bO
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac2cbac54f9d8388529b12a727d4e441.exe"C:\Users\Admin\AppData\Local\Temp\ac2cbac54f9d8388529b12a727d4e441.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8.6MB
-
Filesize
8.6MB