Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-03-2024 04:03
General
-
Target
6e7_2021-01-19_18-04.exe
-
Size
509KB
-
MD5
d4827f2bb4c0446d1bba5df00c2436b8
-
SHA1
69db7a9dd71235671819472bf2d55bb3eeaf11ea
-
SHA256
235e42b187151383ebb91cb85af8500f19e18906bf57917fcf9e0da7004c86ff
-
SHA512
9c3429767a76dfcaeaf6bc1b032d71ddb04a6d7f2956eb390cde050e5965fc0e8d2affb3b31061307f76f68c9c0e90e7f3908a73081c044ff89de88ff92307a5
-
SSDEEP
12288:abmDTkUymtqTNbr2piRpjhV5gJtO+PbBJgSIg:aaDTMmtg1rBQ4+PcSV
Score
10/10
Malware Config
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V1 payload 3 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
Modifies system certificate store 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e7_2021-01-19_18-04.exe"C:\Users\Admin\AppData\Local\Temp\6e7_2021-01-19_18-04.exe"1⤵
- Modifies system certificate store
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
584KB
-
Filesize
66.2MB
-
Filesize
1024KB
-
Filesize
584KB