Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23-07-2024 07:44
Static task
static1
Behavioral task
behavioral1
Sample
012e382049b88808e2d0b26e016dc189f608deea9b6cc993ce24a57c99dd93d1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
012e382049b88808e2d0b26e016dc189f608deea9b6cc993ce24a57c99dd93d1.exe
Resource
win10v2004-20240704-en
General
-
Target
012e382049b88808e2d0b26e016dc189f608deea9b6cc993ce24a57c99dd93d1.exe
-
Size
604KB
-
MD5
03c5e639039fc1d30c92df7527e6e464
-
SHA1
42af028d0e3255c97626b06ae262a34b46419772
-
SHA256
012e382049b88808e2d0b26e016dc189f608deea9b6cc993ce24a57c99dd93d1
-
SHA512
43e215724d8a91c09c8a4c3c23584f4d4f39d0278e28bc918ee82fdc96ec36eb5cfb8c03491b80045d9448c6c1a775aa236a852d62117810a87aef6d32b0b84e
-
SSDEEP
12288:kwFVzgdn12PiuBWq5y6zLJ7M29SGMzmr:kAVgn+igWwVgXGMzy
Malware Config
Extracted
raccoon
1.7.3
c021300d0074689fde86c87568e215c582272721
-
url4cnc
https://tttttt.me/ch0koalpengold
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
Processes:
resource yara_rule behavioral1/memory/2644-2-0x0000000000330000-0x00000000003C1000-memory.dmp family_raccoon_v1 behavioral1/memory/2644-3-0x0000000000400000-0x0000000000492000-memory.dmp family_raccoon_v1 behavioral1/memory/2644-4-0x0000000000400000-0x00000000004AC000-memory.dmp family_raccoon_v1 behavioral1/memory/2644-7-0x0000000000330000-0x00000000003C1000-memory.dmp family_raccoon_v1 behavioral1/memory/2644-8-0x0000000000400000-0x0000000000492000-memory.dmp family_raccoon_v1