General
-
Target
e9abda09ff147a91ceacf0184069126f12fab01933ddda7a99357035a3108dc8
-
Size
555KB
-
Sample
210930-2bxkraaehp
-
MD5
57852044777096dc0518a6c69d86362d
-
SHA1
1ea37ec6dc147df3758d65d279a24751de5f6528
-
SHA256
e9abda09ff147a91ceacf0184069126f12fab01933ddda7a99357035a3108dc8
-
SHA512
97ba79756d4c1763d12c6ce37f30e854efb99dfdd826053490a08d823397dd2b7f158949e2cae2d24fab54f2e5186493aabccba011357465a7750161c52b84ce
Static task
static1
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
e9abda09ff147a91ceacf0184069126f12fab01933ddda7a99357035a3108dc8
-
Size
555KB
-
MD5
57852044777096dc0518a6c69d86362d
-
SHA1
1ea37ec6dc147df3758d65d279a24751de5f6528
-
SHA256
e9abda09ff147a91ceacf0184069126f12fab01933ddda7a99357035a3108dc8
-
SHA512
97ba79756d4c1763d12c6ce37f30e854efb99dfdd826053490a08d823397dd2b7f158949e2cae2d24fab54f2e5186493aabccba011357465a7750161c52b84ce
-
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
-
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-