Overview

overview

10

Static

static

353e1504e1...e4.exe

windows7_x64

10

353e1504e1...e4.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    353e1504e161afde5389d5f8945511e4.exe
  • Size 593KB
  • Sample211018-ndqnbsedcl
  • SHA256 33d3b2f2022f7bc8f6d5563a962d41fbb984b212b9e09f0ddf5fe7e9a44a8d34
  • MD5 SHA1 SHA512
Score
10/10
raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target
      353e1504e161afde5389d5f8945511e4.exe
    • Size 593KB
    • SHA256 33d3b2f2022f7bc8f6d5563a962d41fbb984b212b9e09f0ddf5fe7e9a44a8d34
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks