Overview

overview

10

Static

static

d949b2a7fc...a8.exe

windows7_x64

10

d949b2a7fc...a8.exe

windows10_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d949b2a7fc1633e57f1afa34cd0a90a8

  • Size

    465KB

  • Sample

    210624-djcxj3wefa

  • MD5

    d949b2a7fc1633e57f1afa34cd0a90a8

  • SHA1

    76b705a243bf5012be62d8789f4271e4de4b0547

  • SHA256

    5ca87d23b76747cc2710bede0dd15ca05f21e1ca1df959e95aebf49304a677a0

  • SHA512

    07b7eae9c5555ab25f703e0bf40b414f79322b78f049d8da9ee8d7bfdc6ab9339bad42fa572b3018b5319b74a76bec998eb18a4eed0febe22952f3b6126a4013

Score
10/10
raccoonstealer

Malware Config

Targets

    • Target

      d949b2a7fc1633e57f1afa34cd0a90a8

    • Size

      465KB

    • MD5

      d949b2a7fc1633e57f1afa34cd0a90a8

    • SHA1

      76b705a243bf5012be62d8789f4271e4de4b0547

    • SHA256

      5ca87d23b76747cc2710bede0dd15ca05f21e1ca1df959e95aebf49304a677a0

    • SHA512

      07b7eae9c5555ab25f703e0bf40b414f79322b78f049d8da9ee8d7bfdc6ab9339bad42fa572b3018b5319b74a76bec998eb18a4eed0febe22952f3b6126a4013

    Score
    10/10
    raccoonstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Core1 .NET packer

      Detects packer/loader used by .NET malware.

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks