Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Analysis

  • max time kernel
    292s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02-05-2024 06:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9b6a1d1a00ddd716e344cc64e5592291bb2eb2f5d36a95a32a7b2bddd02a1402.exe

  • Size

    5.0MB

  • MD5

    b4926c1f9ec05712ead0e969eaf01357

  • SHA1

    dc1987188b7ba0ab40272cffb0ed34023b36b710

  • SHA256

    9b6a1d1a00ddd716e344cc64e5592291bb2eb2f5d36a95a32a7b2bddd02a1402

  • SHA512

    12ef165f6a475402292dfbfabb76e1afe34d748d00dd7d6c41058d287305cc66e6354b371332ee5348709dd889d5e5bf3cad81ed1860c7ad7e9a6b34a3ead424

  • SSDEEP

    98304:9E2M430Xb5Ur+IfLIZzM+7NOVZkF0kWFa3WnkWGxgZm+jzWBk0:K22XbFIcZjgC9jvLIzWi0

Score
10/10
raccoonstealer

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer V2 payload 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b6a1d1a00ddd716e344cc64e5592291bb2eb2f5d36a95a32a7b2bddd02a1402.exe
    "C:\Users\Admin\AppData\Local\Temp\9b6a1d1a00ddd716e344cc64e5592291bb2eb2f5d36a95a32a7b2bddd02a1402.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2228-0-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-1-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-23-0x00000000001F0000-0x00000000001F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-21-0x00000000001F0000-0x00000000001F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-65-0x0000000000F90000-0x0000000000F91000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-64-0x00000000003F0000-0x00000000003F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-62-0x00000000003F0000-0x00000000003F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-60-0x00000000003F0000-0x00000000003F1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-59-0x00000000003E0000-0x00000000003E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-58-0x000000000041B000-0x0000000000841000-memory.dmp
    Filesize

    4.1MB

    Download
  • memory/2228-114-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-113-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-115-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-56-0x00000000003E0000-0x00000000003E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-116-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-54-0x00000000003E0000-0x00000000003E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-53-0x00000000002D0000-0x00000000002D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-51-0x00000000002D0000-0x00000000002D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-49-0x00000000002D0000-0x00000000002D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-117-0x0000000000400000-0x0000000000E18000-memory.dmp
    Filesize

    10.1MB

    Download
  • memory/2228-48-0x00000000002C0000-0x00000000002C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-46-0x00000000002C0000-0x00000000002C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-44-0x00000000002C0000-0x00000000002C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-43-0x00000000002B0000-0x00000000002B1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-41-0x00000000002B0000-0x00000000002B1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-39-0x00000000002B0000-0x00000000002B1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-38-0x00000000002A0000-0x00000000002A1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-36-0x00000000002A0000-0x00000000002A1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-34-0x00000000002A0000-0x00000000002A1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-33-0x0000000000290000-0x0000000000291000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-31-0x0000000000290000-0x0000000000291000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-28-0x0000000000200000-0x0000000000201000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-26-0x0000000000200000-0x0000000000201000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-18-0x00000000001E0000-0x00000000001E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-16-0x00000000001E0000-0x00000000001E1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-13-0x00000000001D0000-0x00000000001D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-11-0x00000000001D0000-0x00000000001D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-9-0x00000000001D0000-0x00000000001D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-8-0x00000000001C0000-0x00000000001C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-6-0x00000000001C0000-0x00000000001C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-4-0x00000000001C0000-0x00000000001C1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/2228-120-0x000000000041B000-0x0000000000841000-memory.dmp
    Filesize

    4.1MB

    Download