Analysis
-
max time kernel
155s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
22-03-2024 16:20
General
-
Target
6cf1df06dc076ebe0342f476a1ce4d96cfb640cd784e8f1b70b6fc2586414263.exe
-
Size
14.6MB
-
MD5
f9a34f9c672f831c5898fe9a4a9e34ad
-
SHA1
57810cf2e21035038b54d898173731ef13823f5d
-
SHA256
6cf1df06dc076ebe0342f476a1ce4d96cfb640cd784e8f1b70b6fc2586414263
-
SHA512
1dd2838315841185ab89adf7b53a735d6113827a9b61cf1428c4b2a1aaf75bb838c3c47558e6c47e1433689c80fc328224400cd50826bc2335b3160b3b90db90
-
SSDEEP
196608:RGx8sHLDmin1/iVtC1acJlZ/dY8o+6AHun0ejyX/fT8X7gDd9PyeOSWk/CeGjfp:EbUtCBlZ19RuzyX/r8rgDvlOdk8
Score
10/10
Malware Config
Extracted
Family
raccoon
Botnet
23883deb102ef0839fbfe8fcef1a5fc7
C2
http://83.217.11.6
http://37.220.87.69
http://83.217.11.14
Attributes
-
user_agent
B1D3N_RIM_MY_ASS
xor.plain
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V2 payload 4 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6cf1df06dc076ebe0342f476a1ce4d96cfb640cd784e8f1b70b6fc2586414263.exe"C:\Users\Admin\AppData\Local\Temp\6cf1df06dc076ebe0342f476a1ce4d96cfb640cd784e8f1b70b6fc2586414263.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4092 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
26.8MB
-
Filesize
4KB
-
Filesize
26.8MB
-
Filesize
26.8MB