Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/03/2024, 07:57

General

  • Target

    d05700070424e49494e3cc838d50caf5.exe

  • Size

    589KB

  • MD5

    d05700070424e49494e3cc838d50caf5

  • SHA1

    54c18cacb8fd2cc608efa66ba99938301f3d07a9

  • SHA256

    68323f23d9504e36cfc5591f2f35b33d623dc11d6cec4ae195771693afb650a5

  • SHA512

    e4f43f1904dd14a1ef1777f2518cf7aeac665b376063e477feff2c25e12f246c21f55290f40ab422b60a9788ec5e0fb2d5c7ff499e1c50000da2101a3d737b42

  • SSDEEP

    12288:HmB+LdTvW3nrv6AA2M5RLb1lnod8Zg3SlSzj6quqOwf:HmB+Rmw2sRLxNq8ZWSloubBw

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d05700070424e49494e3cc838d50caf5.exe
    "C:\Users\Admin\AppData\Local\Temp\d05700070424e49494e3cc838d50caf5.exe"
    1⤵
      PID:4892

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4892-1-0x00000000033A0000-0x00000000034A0000-memory.dmp

      Filesize

      1024KB

    • memory/4892-2-0x0000000005060000-0x00000000050F1000-memory.dmp

      Filesize

      580KB

    • memory/4892-3-0x0000000000400000-0x000000000328F000-memory.dmp

      Filesize

      46.6MB

    • memory/4892-4-0x0000000000400000-0x000000000328F000-memory.dmp

      Filesize

      46.6MB

    • memory/4892-6-0x00000000033A0000-0x00000000034A0000-memory.dmp

      Filesize

      1024KB

    • memory/4892-7-0x0000000005060000-0x00000000050F1000-memory.dmp

      Filesize

      580KB