Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
15/03/2024, 00:25
General
-
Target
ca04502ff8009c1cc5a1ba556d9c9ffd.exe
-
Size
5.9MB
-
MD5
ca04502ff8009c1cc5a1ba556d9c9ffd
-
SHA1
de0a3fc889a15ddab0cb4afa931a72859a55735f
-
SHA256
ebbef474434eab0794928cccebb8db93ed801dc2dd2b3e45f46c736d78718f9e
-
SHA512
032a55808e19d6d67d21b309962a9f81f124173dc0529880f067c14b68534b3b006e2ed246add55f5c5326122437dc80f592c5635713df7dce3796a85b2a0874
-
SSDEEP
98304:ZS6B/6qRfi0oMOFScwwgQM07W9IE623VoAdnqZhOs+QxsWMzZeSsgLUtfFsM:ZSy/tRfi0zOFSxjF0IlCAiht+0sz8jgK
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca04502ff8009c1cc5a1ba556d9c9ffd.exe"C:\Users\Admin\AppData\Local\Temp\ca04502ff8009c1cc5a1ba556d9c9ffd.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.8MB
-
Filesize
9.8MB