Overview

overview

10

Static

static

3f6c42e0e6...14.exe

windows7_x64

10

3f6c42e0e6...14.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3f6c42e0e6c9e4fc859d74a094bc4b14.exe
  • Size 566KB
  • Sample211018-y3a92sefb2
  • SHA256 f6aa3dc3569ec484dd54f461b0f4ff25de4a81c422ad0b91ec06ae5c0fa893e5
  • MD5 SHA1 SHA512
Score
10/10
raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      3f6c42e0e6c9e4fc859d74a094bc4b14.exe
    • Size 566KB
    • SHA256 f6aa3dc3569ec484dd54f461b0f4ff25de4a81c422ad0b91ec06ae5c0fa893e5
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks