Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22-11-2024 18:21
Static task
static1
Behavioral task
behavioral1
Sample
5c74b6b32001fb9ecefe75b9d729b29c95cd94a650430279664d7227cd8d1f3d.exe
Resource
win7-20241010-en
General
-
Target
5c74b6b32001fb9ecefe75b9d729b29c95cd94a650430279664d7227cd8d1f3d.exe
-
Size
929KB
-
MD5
797daa708caa8d68743e306420ce47e0
-
SHA1
008a3d74738c127592eba3280d806722f6261fec
-
SHA256
5c74b6b32001fb9ecefe75b9d729b29c95cd94a650430279664d7227cd8d1f3d
-
SHA512
acecd0f44d07b425f5a4740d8f69c8119c03cfb823412cdc01dd1af8886eb12ea529b2b8334ebe4f9880fea3a205ea0c1c72a35e50fa7df45d001bcb385ad924
-
SSDEEP
12288:7ML7zocca24TbKfFapMLF52ucm3didacDUC6RMyFXESWRp28/u9jXxYGzuu8QMe4:/a2laXDUC9yPJ8hL
Malware Config
Signatures
-
Raccoon Stealer V1 payload 3 IoCs
resource yara_rule behavioral1/memory/2484-1-0x0000000000400000-0x00000000024D9000-memory.dmp family_raccoon_v1 behavioral1/memory/2484-2-0x0000000000400000-0x00000000024E9000-memory.dmp family_raccoon_v1 behavioral1/memory/2484-16-0x0000000000400000-0x00000000024E9000-memory.dmp family_raccoon_v1 -
Raccoon family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5c74b6b32001fb9ecefe75b9d729b29c95cd94a650430279664d7227cd8d1f3d.exe