Overview

overview

10

Static

static

d40e91dbbe...35.exe

windows7_x64

10

d40e91dbbe...35.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d40e91dbbe80688907297d37313f1a35.exe
  • Size 563KB
  • Sample210520-5hdlset7na
  • SHA256 07b18b26f93bfd5240f4afbc62dc9762ad594926aeff9ecec0de7fb4a7b70822
  • MD5 SHA1 SHA512
Score
10/10
raccoon88cd0f861c0c35b834a6d4d6e91c9e9bd00f4226spywarestealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 88cd0f861c0c35b834a6d4d6e91c9e9bd00f4226

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target
      d40e91dbbe80688907297d37313f1a35.exe
    • Size 563KB
    • SHA256 07b18b26f93bfd5240f4afbc62dc9762ad594926aeff9ecec0de7fb4a7b70822
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon88cd0f861c0c35b834a6d4d6e91c9e9bd00f4226spywarestealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks