Overview

overview

10

Static

static

f75bf9d3ea...da.exe

windows7_x64

10

f75bf9d3ea...da.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f75bf9d3ea194bee098497c14bc53ada.exe
  • Size 593KB
  • Sample211018-ncj46aedbp
  • SHA256 3f7782d85f744e3e728fb3b2c3dc04d00993f3e6a7caf3b4cab412837bcc4c07
  • MD5 SHA1 SHA512
Score
10/10
raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      f75bf9d3ea194bee098497c14bc53ada.exe
    • Size 593KB
    • SHA256 3f7782d85f744e3e728fb3b2c3dc04d00993f3e6a7caf3b4cab412837bcc4c07
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks