Overview

overview

10

Static

static

93963DA2EB...43.exe

windows7_x64

10

93963DA2EB...43.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    93963DA2EB14233D540C7B21CCB91443.exe
  • Size 594KB
  • Sample210628-t7ehekne5e
  • SHA256 f7a0d1831875dbfa2b76e18103d93e5208df22ee6a490af7e5db0ddef945c2fa
  • MD5 SHA1 SHA512
Score
10/10
raccoon5339a5db91bba8fa758672b05e7eb691a224bf94stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 5339a5db91bba8fa758672b05e7eb691a224bf94

Attributes
  • url4cnc

    https://tttttt.me/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target
      93963DA2EB14233D540C7B21CCB91443.exe
    • Size 594KB
    • SHA256 f7a0d1831875dbfa2b76e18103d93e5208df22ee6a490af7e5db0ddef945c2fa
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon5339a5db91bba8fa758672b05e7eb691a224bf94stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks