Overview

overview

10

Static

static

a9497b9a94...48.exe

windows7_x64

a9497b9a94...48.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a9497b9a942168e0024089083f204848.exe
  • Size 524KB
  • Sample210907-rwbtnsgabj
  • SHA256 cd682f673e7dfbeac62b8e2fad4afa3fd12e25faf8356635f4ff76c4dd326cbf
  • MD5 SHA1 SHA512
Score
10/10
raccoon56be4efb71b0a38de783d05b401b05f1bc805bb2stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 56be4efb71b0a38de783d05b401b05f1bc805bb2

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target
      a9497b9a942168e0024089083f204848.exe
    • Size 524KB
    • SHA256 cd682f673e7dfbeac62b8e2fad4afa3fd12e25faf8356635f4ff76c4dd326cbf
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon56be4efb71b0a38de783d05b401b05f1bc805bb2stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks