Analysis
-
max time kernel
87s -
max time network
81s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-12-2024 15:10
General
-
Target
Opensea Mint/Launcher.exe
-
Size
2.4MB
-
MD5
4cd71ee88eab1d1774584e560dd05a5e
-
SHA1
e359c0e8fe530d3bca70a3eecaed20df051d0e75
-
SHA256
2318aab19d001baa674543b6fef1626ae23731f38ceaee3babcc643c9ae88a1f
-
SHA512
7e46d2dcc44dd5b65c6a2857d08fa1226b6df69c089261c894096343c0a868b2e0d6965e7d1ea5c69336c6846a2dfe56736912f497ae7640fbf264859aecf166
-
SSDEEP
49152:GN7fb+/XdfVsLbFBPDpwEITsHMBXQJw0wKW6XdvPOB:GZC/t9CAEITsHMKw0FWuvG
Malware Config
Extracted
raccoon
7af9c6169887d79cc4d744abe122c9c2
http://213.252.247.130/
http://213.252.247.152/
-
user_agent
mozzzzzzzzzzz
Signatures
-
Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
-
Raccoon Stealer V2 payload 10 IoCs
-
Raccoon family
-
Suspicious use of NtSetInformationThreadHideFromDebugger 7 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Opensea Mint\Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Opensea Mint\Launcher.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.6MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
3.8MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB