Resubmissions
28/07/2024, 19:29
240728-x7ktlsthqd09/03/2024, 03:19
240309-dvm9escb7809/03/2024, 03:19
240309-dt9e9scb7609/03/2024, 03:15
240309-dr1eksda4v1009/03/2024, 03:13
240309-dq8dssda3w1008/03/2024, 21:03
240308-zwdbhagb2410Analysis
- max time kernel
129s - max time network
137s - platform
windows10-1703_x64 - resource
win10-20240221-en - resource tags
- submitted
09/03/2024, 03:15
General
- Target 12153f7601a0162a0996ee5ee52270c1ee8c58842a9a483caa83b19138df5db7.exe
- Size 7.9MB
- Sample240309-dr1eksda4v
- SHA256 12153f7601a0162a0996ee5ee52270c1ee8c58842a9a483caa83b19138df5db7
Malware Config
Signatures
- Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
- Raccoon Stealer V2 payload 4 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12153f7601a0162a0996ee5ee52270c1ee8c58842a9a483caa83b19138df5db7.exe"C:\Users\Admin\AppData\Local\Temp\12153f7601a0162a0996ee5ee52270c1ee8c58842a9a483caa83b19138df5db7.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4964-0-0x0000000000400000-0x00000000011CF000-memory.dmp
memory/4964-6-0x00000000012E0000-0x00000000012E1000-memory.dmp
memory/4964-7-0x00000000012F0000-0x00000000012F1000-memory.dmp
memory/4964-8-0x0000000000400000-0x00000000011CF000-memory.dmp
memory/4964-9-0x0000000001470000-0x0000000001471000-memory.dmp
memory/4964-10-0x0000000001480000-0x0000000001481000-memory.dmp
memory/4964-12-0x00000000014A0000-0x00000000014A1000-memory.dmp
memory/4964-11-0x0000000001490000-0x0000000001491000-memory.dmp
memory/4964-13-0x00000000014B0000-0x00000000014B1000-memory.dmp
memory/4964-14-0x00000000014C0000-0x00000000014C1000-memory.dmp
memory/4964-16-0x0000000002F80000-0x0000000002F81000-memory.dmp
memory/4964-17-0x0000000002F90000-0x0000000002F91000-memory.dmp
memory/4964-15-0x00000000014D0000-0x00000000014D1000-memory.dmp
memory/4964-19-0x0000000002FB0000-0x0000000002FB1000-memory.dmp
memory/4964-18-0x0000000002FA0000-0x0000000002FA1000-memory.dmp
memory/4964-20-0x0000000002FC0000-0x0000000002FC1000-memory.dmp
memory/4964-21-0x0000000002FD0000-0x0000000002FD1000-memory.dmp
memory/4964-23-0x0000000002FF0000-0x0000000002FF1000-memory.dmp
memory/4964-22-0x0000000002FE0000-0x0000000002FE1000-memory.dmp
memory/4964-24-0x0000000003000000-0x0000000003001000-memory.dmp
memory/4964-25-0x0000000003010000-0x0000000003011000-memory.dmp
memory/4964-26-0x0000000003020000-0x0000000003021000-memory.dmp
memory/4964-27-0x0000000003030000-0x0000000003031000-memory.dmp
memory/4964-28-0x0000000000400000-0x00000000011CF000-memory.dmp
memory/4964-30-0x0000000000400000-0x00000000011CF000-memory.dmp