General
-
Target
6f687c7a1abbf7656cfffb85d59444b2.exe
-
Size
827KB
-
Sample
200731-avtsdvajds
-
MD5
6f687c7a1abbf7656cfffb85d59444b2
-
SHA1
371f89d795fd91258fea6786ca890a2e910874da
-
SHA256
27d4fcfed2b8070e8ead45bf11d9845ac6372538146ff2f49622ba8e07e37938
-
SHA512
9f3acab3750c07268cc4b3d70bc627a6bb338c30f1ed7074fb14fc6f7a585cf963e55f86c62e4be064374ddfff23e71b36e26b96dab23945868642cf5a583ff1
Static task
static1
Behavioral task
behavioral1
Sample
6f687c7a1abbf7656cfffb85d59444b2.exe
Resource
win7
Behavioral task
behavioral2
Sample
6f687c7a1abbf7656cfffb85d59444b2.exe
Resource
win10v200722
Malware Config
Extracted
C:\Users\Admin\AppData\LocalLow\machineinfo.txt
raccoon
Extracted
C:\Users\Admin\AppData\LocalLow\machineinfo.txt
raccoon
Targets
-
-
Target
6f687c7a1abbf7656cfffb85d59444b2.exe
-
Size
827KB
-
MD5
6f687c7a1abbf7656cfffb85d59444b2
-
SHA1
371f89d795fd91258fea6786ca890a2e910874da
-
SHA256
27d4fcfed2b8070e8ead45bf11d9845ac6372538146ff2f49622ba8e07e37938
-
SHA512
9f3acab3750c07268cc4b3d70bc627a6bb338c30f1ed7074fb14fc6f7a585cf963e55f86c62e4be064374ddfff23e71b36e26b96dab23945868642cf5a583ff1
Score10/10-
Raccoon log file
Detects a log file produced by the Raccoon Stealer.
-
Deletes itself
-
Loads dropped DLL
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
JavaScript code in executable
-