Overview
overview
10Static
static
10001.exe
windows7-x64
10001.exe
windows10-2004-x64
101488.exe
windows7-x64
101488.exe
windows10-2004-x64
101_cr.exe
windows7-x64
51_cr.exe
windows10-2004-x64
11cr.exe
windows7-x64
101cr.exe
windows10-2004-x64
101fc2d.exe
windows7-x64
101fc2d.exe
windows10-2004-x64
106e7_2021-0...04.exe
windows7-x64
106e7_2021-0...04.exe
windows10-2004-x64
10Abjects.exe
windows7-x64
1Abjects.exe
windows10-2004-x64
1BattleText.exe
windows7-x64
9BattleText.exe
windows10-2004-x64
10HANS.exe
windows7-x64
1HANS.exe
windows10-2004-x64
1Hulu.exe
windows7-x64
7Hulu.exe
windows10-2004-x64
7IntelFIVE.exe
windows7-x64
3IntelFIVE.exe
windows10-2004-x64
7IntelFOUR.exe
windows7-x64
3IntelFOUR.exe
windows10-2004-x64
7IntelONE.exe
windows7-x64
3IntelONE.exe
windows10-2004-x64
7IntelTHREE.exe
windows7-x64
3IntelTHREE.exe
windows10-2004-x64
7IntelTWO.exe
windows7-x64
3IntelTWO.exe
windows10-2004-x64
7Lucky_Fixed.exe
windows7-x64
1Lucky_Fixed.exe
windows10-2004-x64
1Analysis
-
max time kernel
151s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2024 04:03
Behavioral task
behavioral1
Sample
001.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
001.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
1488.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
1488.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
1_cr.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
1_cr.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
1cr.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
1cr.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
1fc2d.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
1fc2d.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
6e7_2021-01-19_18-04.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
6e7_2021-01-19_18-04.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Abjects.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Abjects.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
BattleText.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
BattleText.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
HANS.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
HANS.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
Hulu.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Hulu.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
IntelFIVE.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
IntelFIVE.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
IntelFOUR.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
IntelFOUR.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
IntelONE.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
IntelONE.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
IntelTHREE.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
IntelTHREE.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
IntelTWO.exe
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
IntelTWO.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Lucky_Fixed.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Lucky_Fixed.exe
Resource
win10v2004-20240226-en
General
-
Target
6e7_2021-01-19_18-04.exe
-
Size
509KB
-
MD5
d4827f2bb4c0446d1bba5df00c2436b8
-
SHA1
69db7a9dd71235671819472bf2d55bb3eeaf11ea
-
SHA256
235e42b187151383ebb91cb85af8500f19e18906bf57917fcf9e0da7004c86ff
-
SHA512
9c3429767a76dfcaeaf6bc1b032d71ddb04a6d7f2956eb390cde050e5965fc0e8d2affb3b31061307f76f68c9c0e90e7f3908a73081c044ff89de88ff92307a5
-
SSDEEP
12288:abmDTkUymtqTNbr2piRpjhV5gJtO+PbBJgSIg:aaDTMmtg1rBQ4+PcSV
Malware Config
Signatures
-
Raccoon Stealer V1 payload 3 IoCs
Processes:
resource yara_rule behavioral12/memory/2488-2-0x0000000004930000-0x00000000049C2000-memory.dmp family_raccoon_v1 behavioral12/memory/2488-3-0x0000000000400000-0x0000000004634000-memory.dmp family_raccoon_v1 behavioral12/memory/2488-6-0x0000000004930000-0x00000000049C2000-memory.dmp family_raccoon_v1 -
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
Processes:
resource yara_rule behavioral12/memory/2488-3-0x0000000000400000-0x0000000004634000-memory.dmp INDICATOR_SUSPICIOUS_Binary_References_Browsers -
Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
Processes:
resource yara_rule behavioral12/memory/2488-3-0x0000000000400000-0x0000000004634000-memory.dmp INDICATOR_SUSPICIOUS_EXE_References_Messaging_Clients -
UPX dump on OEP (original entry point) 1 IoCs
Processes:
resource yara_rule behavioral12/memory/2488-3-0x0000000000400000-0x0000000004634000-memory.dmp UPX