Overview

overview

10

Static

static

8FCC19C0EA...9A.exe

windows7_x64

10

8FCC19C0EA...9A.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8FCC19C0EAD093CDEEDEA2C1ECEE99328C672779EAE9A.exe
  • Size 418KB
  • Sample210509-7194955saa
  • SHA256 8fcc19c0ead093cdeedea2c1ecee99328c672779eae9a9a1507f8e422d56dd07
  • MD5 SHA1 SHA512
Score
10/10
raccoona3a85b69314053c3bb015532d1a960a3d08baeb8stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target
      8FCC19C0EAD093CDEEDEA2C1ECEE99328C672779EAE9A.exe
    • Size 418KB
    • SHA256 8fcc19c0ead093cdeedea2c1ecee99328c672779eae9a9a1507f8e422d56dd07
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoona3a85b69314053c3bb015532d1a960a3d08baeb8stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks