raccoon | e5288c5a2eb9af558e48fe57edbcd830c0719427f0737be21a1c47254b1ccf00 | Triage

Submit
Reports

Overview

overview

Static

static

7

a48f52a04c...18.exe

windows7-x64

a48f52a04c...18.exe

windows10-2004-x64

Sharing

General

Target

a48f52a04c506bc0fad43183584856c2_JaffaCakes118
Size

3.7MB
Sample

240817-3dq2eswbrk
MD5

a48f52a04c506bc0fad43183584856c2
SHA1

9fb09ada7329572950de028f48c2a40cf7a5d7fb
SHA256

e5288c5a2eb9af558e48fe57edbcd830c0719427f0737be21a1c47254b1ccf00
SHA512

6f1f81096ddb286685dda1a6cd67435ff065552dd0fa43b0e1b55f3c817a9c499040686523b3532b318a6796ff2a89e6f36f79d6429632c0499132ea4bdaa003
SSDEEP

49152:ET2f0wA0d8TGNWICcwc9CtWNYjidWW8/FzzC2oOXSDglUMgUGGsJ/NkqVY5bOSid:ET4V8qPCb6cziv8/F/7iDqUvZJ/NY7

Score

10^/10

raccoon discovery stealer vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a48f52a04c506bc0fad43183584856c2_JaffaCakes118.exe

Resource

win7-20240705-en

raccoon discovery stealer vmprotect

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

a48f52a04c506bc0fad43183584856c2_JaffaCakes118.exe

Resource

win10v2004-20240802-en

raccoon discovery stealer vmprotect

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  a48f52a04c506bc0fad43183584856c2_JaffaCakes118
- Size
  
  3.7MB
- MD5
  
  a48f52a04c506bc0fad43183584856c2
- SHA1
  
  9fb09ada7329572950de028f48c2a40cf7a5d7fb
- SHA256
  
  e5288c5a2eb9af558e48fe57edbcd830c0719427f0737be21a1c47254b1ccf00
- SHA512
  
  6f1f81096ddb286685dda1a6cd67435ff065552dd0fa43b0e1b55f3c817a9c499040686523b3532b318a6796ff2a89e6f36f79d6429632c0499132ea4bdaa003
- SSDEEP
  
  49152:ET2f0wA0d8TGNWICcwc9CtWNYjidWW8/FzzC2oOXSDglUMgUGGsJ/NkqVY5bOSid:ET4V8qPCb6cziv8/F/7iDqUvZJ/NY7
Score

10^/10

raccoon discovery stealer vmprotect
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Raccoon Stealer V1 payload
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

raccoondiscoverystealervmprotect

behavioral2

raccoondiscoverystealervmprotect

© 2018-2024

Terms | Privacy