Overview

overview

10

Static

static

50f3588df5...fd.exe

windows7_x64

10

50f3588df5...fd.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    50f3588df57df36f71786cb7fd2876fd.exe
  • Size 561KB
  • Sample211013-vnjfbsefg4
  • SHA256 4701e82080bbf43bfaf8dee522b66e11ee9029154eca770701e34e3a7822f263
  • MD5 SHA1 SHA512
Score
10/10
raccoonf101b8d36e5dba77385a11565177c9403f6a2964stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • f101b8d36e5dba77385a11565177c9403f6a2964

Attributes
  • url4cnc

    http://telegatt.top/mailware

    http://telegka.top/mailware

    http://telegin.top/mailware

    https://t.me/mailware

rc4.plain
rc4.plain

Targets

    • Target
      50f3588df57df36f71786cb7fd2876fd.exe
    • Size 561KB
    • SHA256 4701e82080bbf43bfaf8dee522b66e11ee9029154eca770701e34e3a7822f263
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoonf101b8d36e5dba77385a11565177c9403f6a2964stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks