General
-
Target
SecuriteInfo.com.Trojan.GenericKD.43529988.891.8883
-
Size
1.1MB
-
Sample
200801-gshn1m2j8s
-
MD5
699e10e9adc36236e30a3b4bc0d243c9
-
SHA1
5e8e3b26746bcd30e2bd92d43ebc4e8981fe4cac
-
SHA256
4b8487facc8393281ac3ba036992ac03a5dd76f8a81d865841b0d6b6a4fabc22
-
SHA512
cb80b3549e53978fcdaef5e6e6bd1cce9d446ad5e9913e3f4d5f87fbff2db898ad646ba7d22f4c1ac7427424f1767db796e3dab58a1a65e24e7ccbc2aea3316d
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKD.43529988.891.8883.exe
Resource
win7
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKD.43529988.891.8883.exe
Resource
win10v200722
Malware Config
Extracted
C:\Users\Admin\AppData\LocalLow\machineinfo.txt
raccoon
Targets
-
-
Target
SecuriteInfo.com.Trojan.GenericKD.43529988.891.8883
-
Size
1.1MB
-
MD5
699e10e9adc36236e30a3b4bc0d243c9
-
SHA1
5e8e3b26746bcd30e2bd92d43ebc4e8981fe4cac
-
SHA256
4b8487facc8393281ac3ba036992ac03a5dd76f8a81d865841b0d6b6a4fabc22
-
SHA512
cb80b3549e53978fcdaef5e6e6bd1cce9d446ad5e9913e3f4d5f87fbff2db898ad646ba7d22f4c1ac7427424f1767db796e3dab58a1a65e24e7ccbc2aea3316d
Score10/10-
Raccoon log file
Detects a log file produced by the Raccoon Stealer.
-
Deletes itself
-
Loads dropped DLL
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
JavaScript code in executable
-