raccoon | e9d16a514fa8410bc230f592db6a2b22c7df5a4a0df77e1e343e2ccc203cba8e | Triage

Sharing

General

Target

e9d16a514fa8410bc230f592db6a2b22c7df5a4a0df77e1e343e2ccc203cba8e
Size

428KB
Sample

210908-rt67ssefc3
MD5

9d71d6c6ed7fc1e394807d05b23a15ef
SHA1

3d188b8bef87cc6ca081eaa7f06135aecc7f0a34
SHA256

e9d16a514fa8410bc230f592db6a2b22c7df5a4a0df77e1e343e2ccc203cba8e
SHA512

aa93eb7136d10470df92378776e188be3e757e00b2d77d1d4f445c9e482d8cca9f07910d1be27d49473ee54e71f837515adb7761acbba652d2f4183a17d553ed

Score

10^/10

raccoon 93d3ccba4a3cbd5e268873fc1760b2335272e198 stealer

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes

url4cnc
https://telete.in/opa4kiprivatem

rc4.plain

rc4.plain

Targets

- Target
  
  e9d16a514fa8410bc230f592db6a2b22c7df5a4a0df77e1e343e2ccc203cba8e
- Size
  
  428KB
- MD5
  
  9d71d6c6ed7fc1e394807d05b23a15ef
- SHA1
  
  3d188b8bef87cc6ca081eaa7f06135aecc7f0a34
- SHA256
  
  e9d16a514fa8410bc230f592db6a2b22c7df5a4a0df77e1e343e2ccc203cba8e
- SHA512
  
  aa93eb7136d10470df92378776e188be3e757e00b2d77d1d4f445c9e482d8cca9f07910d1be27d49473ee54e71f837515adb7761acbba652d2f4183a17d553ed
Score

10^/10

raccoon 93d3ccba4a3cbd5e268873fc1760b2335272e198 stealer
- Raccoon
  Simple but powerful infostealer which was very active in 2019.
  stealer raccoon
- Suspicious use of NtCreateProcessExOtherParentProcess
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

raccoon93d3ccba4a3cbd5e268873fc1760b2335272e198stealer