Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-03-2024 18:18

General

  • Target

    d6cbd1aa38a5740e5193c56333af4892.exe

  • Size

    527KB

  • MD5

    d6cbd1aa38a5740e5193c56333af4892

  • SHA1

    5dd3e70f51c6adb24091cc0a090d5d6db3a42381

  • SHA256

    445308d32bb054d994e64af2cf8dd5012ab6de2101ff73fb056a693f8cabb7f7

  • SHA512

    91db0cc953907798484a4eb8e9aae0809bbae3e596810cd63f8eda2f832db64e9b232b86180a21e31bfb27a2adf9c3628e37cdb9f15839a0dbeb9bbac50d5cfd

  • SSDEEP

    12288:D7d1AtmUtlaXLHpSdh+o1t1v1vKNWasl17im4AVRh+Q:KmUtTJnv1vGWasbx4ARB

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6cbd1aa38a5740e5193c56333af4892.exe
    "C:\Users\Admin\AppData\Local\Temp\d6cbd1aa38a5740e5193c56333af4892.exe"
    1⤵
      PID:2304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2304-2-0x0000000004150000-0x00000000041DF000-memory.dmp

      Filesize

      572KB

    • memory/2304-1-0x0000000002400000-0x0000000002500000-memory.dmp

      Filesize

      1024KB

    • memory/2304-3-0x0000000000400000-0x00000000023EF000-memory.dmp

      Filesize

      31.9MB

    • memory/2304-4-0x0000000000400000-0x00000000023EF000-memory.dmp

      Filesize

      31.9MB

    • memory/2304-6-0x0000000004150000-0x00000000041DF000-memory.dmp

      Filesize

      572KB

    • memory/2304-7-0x0000000002400000-0x0000000002500000-memory.dmp

      Filesize

      1024KB