Overview

overview

10

Static

static

51f9ec34c7...f4.exe

windows7_x64

10

51f9ec34c7...f4.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51f9ec34c7094e6baaf3ee4a0d1bf9f4.exe

  • Size

    505KB

  • Sample

    210413-qyrhda3tej

  • MD5

    51f9ec34c7094e6baaf3ee4a0d1bf9f4

  • SHA1

    b94cf497d51f6bcd3b26640514a9ecea2e72ad5d

  • SHA256

    c30de5a8c243dcee3ad3f971985ac2608c6678dd0e0869296f64243c5178f85e

  • SHA512

    beb10eb881b801e2fd6e3315225a313c3e28870a437fca062c758e8be32a8eb732f80b3c25d0b7a1956d270d6eca41ddabffcc1e2f150a7a5e9f7e6fafb5c6d7

Score
10/10
raccoonf6a4646c17af7db77b0a5aba1906d97ffcdd34edstealer

Malware Config

Extracted

Family

raccoon

Botnet

f6a4646c17af7db77b0a5aba1906d97ffcdd34ed

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      51f9ec34c7094e6baaf3ee4a0d1bf9f4.exe

    • Size

      505KB

    • MD5

      51f9ec34c7094e6baaf3ee4a0d1bf9f4

    • SHA1

      b94cf497d51f6bcd3b26640514a9ecea2e72ad5d

    • SHA256

      c30de5a8c243dcee3ad3f971985ac2608c6678dd0e0869296f64243c5178f85e

    • SHA512

      beb10eb881b801e2fd6e3315225a313c3e28870a437fca062c758e8be32a8eb732f80b3c25d0b7a1956d270d6eca41ddabffcc1e2f150a7a5e9f7e6fafb5c6d7

    Score
    10/10
    raccoonf6a4646c17af7db77b0a5aba1906d97ffcdd34edstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks