Overview

overview

10

Static

static

B5E3EBBA28...12.exe

windows7_x64

10

B5E3EBBA28...12.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    B5E3EBBA289B7A666D91AF6CA9E80D973AE0AECC14F12.exe
  • Size 612KB
  • Sample210722-1kblpse586
  • SHA256 b5e3ebba289b7a666d91af6ca9e80d973ae0aecc14f12df0657490d910df166d
  • MD5 SHA1 SHA512
Score
10/10
raccoonafefd33a49c7cbd55d417545269920f24c85aa37stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • afefd33a49c7cbd55d417545269920f24c85aa37

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target
      B5E3EBBA289B7A666D91AF6CA9E80D973AE0AECC14F12.exe
    • Size 612KB
    • SHA256 b5e3ebba289b7a666d91af6ca9e80d973ae0aecc14f12df0657490d910df166d
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoonafefd33a49c7cbd55d417545269920f24c85aa37stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks