Overview

overview

10

Static

static

880dfcc2cd...00.exe

windows7_x64

10

880dfcc2cd...00.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    880dfcc2cd155e490aa61bce02ab4500.exe

  • Size

    523KB

  • Sample

    210418-4tzx5fsmzj

  • MD5

    880dfcc2cd155e490aa61bce02ab4500

  • SHA1

    71b77ae9b2c9471a09fc139e36ae8a91b68f54b4

  • SHA256

    4b88caf98ce096cc16a0de0921c17f994215915b47e79bc3f5cad4c9642102cf

  • SHA512

    92858ec16a7bae0ae5e3d28cf5e55d99b4ccdb560364e0a98f2c8eafa4aa6cd9c9a4e9f2cb4a924b8f8220812dddf136e89b6eb61d81059d5105d722b6f68fc5

Score
10/10
raccoonfe080c9bfcbe54ed632d9562ae158e815dbdc717stealer

Malware Config

Extracted

Family

raccoon

Botnet

fe080c9bfcbe54ed632d9562ae158e815dbdc717

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      880dfcc2cd155e490aa61bce02ab4500.exe

    • Size

      523KB

    • MD5

      880dfcc2cd155e490aa61bce02ab4500

    • SHA1

      71b77ae9b2c9471a09fc139e36ae8a91b68f54b4

    • SHA256

      4b88caf98ce096cc16a0de0921c17f994215915b47e79bc3f5cad4c9642102cf

    • SHA512

      92858ec16a7bae0ae5e3d28cf5e55d99b4ccdb560364e0a98f2c8eafa4aa6cd9c9a4e9f2cb4a924b8f8220812dddf136e89b6eb61d81059d5105d722b6f68fc5

    Score
    10/10
    raccoonfe080c9bfcbe54ed632d9562ae158e815dbdc717stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks