Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/03/2024, 15:09

General

  • Target

    beec5e62a4613b8e3ba772f2b5d34b05.exe

  • Size

    496KB

  • MD5

    beec5e62a4613b8e3ba772f2b5d34b05

  • SHA1

    6b0b162bcf3190befc84686b7ea86ed462f4da64

  • SHA256

    d0362f3639b969572b07c7ae731e50ef893168be960533e1232a6db65982305c

  • SHA512

    b3d280d514a326e33e281fd04823fb561a065cb219452abd4a3f9694587005b6a52d6a35f7d2007fc6d0a61d90ab65967a42140b14effc971ddb7bbf453cd431

  • SSDEEP

    12288:KFiw1ZLZHK3kR3JO44hJa2NMnpR10xMU5Ll67RmTY:KFiw1Lq+J54hHN4pPHq8OY

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\beec5e62a4613b8e3ba772f2b5d34b05.exe
    "C:\Users\Admin\AppData\Local\Temp\beec5e62a4613b8e3ba772f2b5d34b05.exe"
    1⤵
      PID:1492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1492-1-0x0000000002F60000-0x0000000003060000-memory.dmp

      Filesize

      1024KB

    • memory/1492-2-0x0000000004AA0000-0x0000000004B33000-memory.dmp

      Filesize

      588KB

    • memory/1492-3-0x0000000000400000-0x0000000002CB2000-memory.dmp

      Filesize

      40.7MB

    • memory/1492-5-0x0000000002F60000-0x0000000003060000-memory.dmp

      Filesize

      1024KB

    • memory/1492-7-0x0000000004AA0000-0x0000000004B33000-memory.dmp

      Filesize

      588KB