Overview

overview

10

Static

static

1

IMAGE-07102021.exe

windows7_x64

10

IMAGE-07102021.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    IMAGE-07102021.exe
  • Size 608KB
  • Sample211006-llgpaaahh8
  • SHA256 459d4fd9bd7ec69f47d9c3306856a7e6ec39b17ff2c88ae80dcac8e9daba760e
  • MD5 SHA1 SHA512
Score
10/10
raccoon27c9b6ae257af0ad6f3f3330ea633fc782fa4dafstealer

Malware Config

Extracted

Family

  • raccoon

Version

  • 1.8.2

Botnet

  • 27c9b6ae257af0ad6f3f3330ea633fc782fa4daf

Attributes
  • url4cnc

    http://teletop.top/iot3redisium

    http://teleta.top/iot3redisium

    https://t.me/iot3redisium

rc4.plain
rc4.plain

Targets

    • Target
      IMAGE-07102021.exe
    • Size 608KB
    • SHA256 459d4fd9bd7ec69f47d9c3306856a7e6ec39b17ff2c88ae80dcac8e9daba760e
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon27c9b6ae257af0ad6f3f3330ea633fc782fa4dafstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks