raccoon

General

Target
0da43ff2818bd897206bf362ee8aa27f.exe
Size 866KB
Sample210812-a6lfnzvd2x
SHA256 90ca9c7f8b656d2104a812ce9ba2625c1ab3b6ae346df7e6f01c838bf8990bda
MD5 0da43ff2818bd897206bf362ee8aa27f
SHA1 7013151ac5b6e201ebb6f20efff8dd8d269e92e5
SHA512 e9711f909d5a11bf7431ea2000f3200e4e206dd53cf1a4ffd4a8fbe0ce974be37878e3c3a2738b3fbeb26acd48a3f04b547e0b3c89884a5d1a74c2d496739a5c
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

raccoon

Botnet

e2b58b2c24d80fcfd249021c5a21ac97c09e40a1

Attributes

url4cnc
https://telete.in/mohibrainos

rc4.plain

Targets

- Target
  0da43ff2818bd897206bf362ee8aa27f.exe
- Size 866KB
- SHA256 90ca9c7f8b656d2104a812ce9ba2625c1ab3b6ae346df7e6f01c838bf8990bda
- MD5 0da43ff2818bd897206bf362ee8aa27f
- SHA1 7013151ac5b6e201ebb6f20efff8dd8d269e92e5
- SHA512 e9711f909d5a11bf7431ea2000f3200e4e206dd53cf1a4ffd4a8fbe0ce974be37878e3c3a2738b3fbeb26acd48a3f04b547e0b3c89884a5d1a74c2d496739a5c
- MD5 SHA1 SHA512
Score

10^/10

raccoon e2b58b2c24d80fcfd249021c5a21ac97c09e40a1 stealer
- Raccoon
  Simple but powerful infostealer which was very active in 2019.
  stealer raccoon
- Raccoon Stealer Payload
- Suspicious use of NtCreateProcessExOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Raccoon Stealer Payload

Suspicious use of NtCreateProcessExOtherParentProcess

Executes dropped EXE

Loads dropped DLL

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2