Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/03/2024, 21:04

General

  • Target

    d1dde95cd9f06e02cd390e4c3d4e4903.exe

  • Size

    462KB

  • MD5

    d1dde95cd9f06e02cd390e4c3d4e4903

  • SHA1

    f5c28eda724bedcc8b0c06ff29da1f69aa871f5e

  • SHA256

    04b34c18709ece0d212e247408e19b638f9eddd1dd24cf9c839fa5bcee5fc9b3

  • SHA512

    73985cfe501ead1cd742cc00ca6fe1815e2e819949cd0b2e66a1413208ed76c92bf86eb0909183ebeab7e2a3ab64783914f045b85b226407c1df3e21624d7fd3

  • SSDEEP

    12288:0VBVsYBVEg7ahiLEdiHTd2Dx7/AbPw98nRG:02uaULEd0TdAx78wiG

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1dde95cd9f06e02cd390e4c3d4e4903.exe
    "C:\Users\Admin\AppData\Local\Temp\d1dde95cd9f06e02cd390e4c3d4e4903.exe"
    1⤵
      PID:468

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/468-1-0x0000000002FA0000-0x00000000030A0000-memory.dmp

      Filesize

      1024KB

    • memory/468-2-0x0000000004A40000-0x0000000004AD3000-memory.dmp

      Filesize

      588KB

    • memory/468-3-0x0000000000400000-0x0000000002CAB000-memory.dmp

      Filesize

      40.7MB

    • memory/468-6-0x0000000002FA0000-0x00000000030A0000-memory.dmp

      Filesize

      1024KB

    • memory/468-7-0x0000000004A40000-0x0000000004AD3000-memory.dmp

      Filesize

      588KB