General
-
Target
13a34940ea842b8115ea03a8ed84f8af6dc0b9f1808b95f275025007c4367bae
-
Size
555KB
-
Sample
211001-dv62jaaggj
-
MD5
2258a77a7917f504764fe13268a47b9c
-
SHA1
88f14d22b9b09c0b88dbe9bb4a3f535318d56cfb
-
SHA256
13a34940ea842b8115ea03a8ed84f8af6dc0b9f1808b95f275025007c4367bae
-
SHA512
09825f608ce33d88a5c59ef561c801deccf31103ac8119531c10e5d3ba20ab98a16c4795b42ba818256eefe06b45a175dbca5dfac7fcfdd6e07274a4bc248a1e
Static task
static1
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
13a34940ea842b8115ea03a8ed84f8af6dc0b9f1808b95f275025007c4367bae
-
Size
555KB
-
MD5
2258a77a7917f504764fe13268a47b9c
-
SHA1
88f14d22b9b09c0b88dbe9bb4a3f535318d56cfb
-
SHA256
13a34940ea842b8115ea03a8ed84f8af6dc0b9f1808b95f275025007c4367bae
-
SHA512
09825f608ce33d88a5c59ef561c801deccf31103ac8119531c10e5d3ba20ab98a16c4795b42ba818256eefe06b45a175dbca5dfac7fcfdd6e07274a4bc248a1e
-
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
-
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-