Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 20:22

General

  • Target

    c1837d16bcfd2bb7720d9dca6acf7092.exe

  • Size

    446KB

  • MD5

    c1837d16bcfd2bb7720d9dca6acf7092

  • SHA1

    ea0d67ab044c0f58dccde1071326b76513beb425

  • SHA256

    fbd752d792e18afeb875baeee86c790d0bd6a97d75459ada32cf8b6561a79d4e

  • SHA512

    9cdaf61aa39390a35de40fbda842a1255e4c92be414bbf3697e30853afda682635f05136b3782248f00d2b15a063f36509c35a6fc6d7d444d2faeebb886abe2f

  • SSDEEP

    6144:c4dk/ENJ71qVlkqCLV+PeeXBYCj5M6vOdk/nTbahjFQhmu5kG3g8xGUAEn:3J7EEqCYPeehTO6/XahxGeGwQ

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c1837d16bcfd2bb7720d9dca6acf7092.exe
    "C:\Users\Admin\AppData\Local\Temp\c1837d16bcfd2bb7720d9dca6acf7092.exe"
    1⤵
      PID:2108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2108-1-0x0000000000230000-0x0000000000330000-memory.dmp

      Filesize

      1024KB

    • memory/2108-2-0x0000000004520000-0x00000000045AF000-memory.dmp

      Filesize

      572KB

    • memory/2108-3-0x0000000000400000-0x0000000002CFE000-memory.dmp

      Filesize

      41.0MB

    • memory/2108-5-0x0000000000230000-0x0000000000330000-memory.dmp

      Filesize

      1024KB

    • memory/2108-7-0x0000000004520000-0x00000000045AF000-memory.dmp

      Filesize

      572KB