Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/03/2024, 00:03

General

  • Target

    cf6c1ce396777a7a6958fb91b1446527.exe

  • Size

    588KB

  • MD5

    cf6c1ce396777a7a6958fb91b1446527

  • SHA1

    e14783ee3c1bd8d484d72bb7ad6aee669753ad19

  • SHA256

    ebc020b59a6cec9c2f765dad4f785f5baba5def84592cc12a6f5c51856f53aef

  • SHA512

    47997b6f90319919ef2adc1c78f7f693a216b22272b2c51b95fd1709f579d52818e340b7f997010551284faebb9d869afb55e5fbbdeed4bb855031617546facf

  • SSDEEP

    12288:pwMoL/+krHmWP32f7dYerTMWcScwbCQR7bhsY+O9DVw7my:W/tl2f+evMWd+obhD+oVwC

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf6c1ce396777a7a6958fb91b1446527.exe
    "C:\Users\Admin\AppData\Local\Temp\cf6c1ce396777a7a6958fb91b1446527.exe"
    1⤵
      PID:4868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4868-1-0x00000000034E0000-0x00000000035E0000-memory.dmp

      Filesize

      1024KB

    • memory/4868-2-0x0000000004FD0000-0x0000000005061000-memory.dmp

      Filesize

      580KB

    • memory/4868-3-0x0000000000400000-0x000000000328F000-memory.dmp

      Filesize

      46.6MB

    • memory/4868-4-0x0000000000400000-0x000000000328F000-memory.dmp

      Filesize

      46.6MB

    • memory/4868-6-0x00000000034E0000-0x00000000035E0000-memory.dmp

      Filesize

      1024KB

    • memory/4868-7-0x0000000004FD0000-0x0000000005061000-memory.dmp

      Filesize

      580KB