Overview

overview

10

Static

static

0427b3ecda...72.exe

windows7_x64

10

0427b3ecda...72.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0427b3ecda18d67665d14b989d6296fe02b74cf27b872.exe

  • Size

    453KB

  • Sample

    210722-hf3hkgcyax

  • MD5

    85ccac3064ee0b602935f2b9f5fb6656

  • SHA1

    0f1d9b825b0ac2e344408eaeb84631ac042fbc8b

  • SHA256

    0427b3ecda18d67665d14b989d6296fe02b74cf27b8721a5fd09cc14a92493b5

  • SHA512

    48566ffe4ab1c75474dbd63cfb2911917590a20401f5ae464bff8b73dd01d329f9182627a7f4417c1e14ebdb8de69487d1d33fab99ec1a486c31aeed16c15c23

Score
10/10
raccoone8fb6fbcbde044a603db529c2275bbfece556557stealer

Malware Config

Extracted

Family

raccoon

Botnet

e8fb6fbcbde044a603db529c2275bbfece556557

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      0427b3ecda18d67665d14b989d6296fe02b74cf27b872.exe

    • Size

      453KB

    • MD5

      85ccac3064ee0b602935f2b9f5fb6656

    • SHA1

      0f1d9b825b0ac2e344408eaeb84631ac042fbc8b

    • SHA256

      0427b3ecda18d67665d14b989d6296fe02b74cf27b8721a5fd09cc14a92493b5

    • SHA512

      48566ffe4ab1c75474dbd63cfb2911917590a20401f5ae464bff8b73dd01d329f9182627a7f4417c1e14ebdb8de69487d1d33fab99ec1a486c31aeed16c15c23

    Score
    10/10
    raccoone8fb6fbcbde044a603db529c2275bbfece556557stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Raccoon Stealer Payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks