Overview

overview

10

Static

static

8427425712...89.exe

windows7_x64

10

8427425712...89.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8427425712b6d0d560b9c3c460036689.exe
  • Size 526KB
  • Sample210415-mszn8vx9sj
  • SHA256 2dce7fdaf0e4da29585a84a1ac8dd655b5406721ff6420b39eb453879f6bca5f
  • MD5 SHA1 SHA512
Score
10/10
raccoon5442f281fb8a4ac6d19427ed61032791e65b8e1bstealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 5442f281fb8a4ac6d19427ed61032791e65b8e1b

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      8427425712b6d0d560b9c3c460036689.exe
    • Size 526KB
    • SHA256 2dce7fdaf0e4da29585a84a1ac8dd655b5406721ff6420b39eb453879f6bca5f
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon5442f281fb8a4ac6d19427ed61032791e65b8e1bstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks