Overview

overview

10

Static

static

b716ef0649...09.exe

windows7_x64

10

b716ef0649...09.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b716ef0649230524ec8117ad8ea7b909.exe

  • Size

    424KB

  • Sample

    211103-ydek6sefe4

  • MD5

    b716ef0649230524ec8117ad8ea7b909

  • SHA1

    9fb2745944a6a323196e76063d030ce40979a404

  • SHA256

    be4c0e3a5025c1cb1a5a4c17321a8412f2599ea5fa6c942c2339479e74a336af

  • SHA512

    e211ffc897ada42890bcb9e27b847647f52e3ecbe7562ca626ba5fbd61c00b3f00761a30668243ed904e63631fffab54023ef03b52fd1601ee5c8812f8818044

Score
10/10
raccoon68e2d75238f7c69859792d206401b6bde2b2515cstealer

Malware Config

Extracted

Family

raccoon

Botnet

68e2d75238f7c69859792d206401b6bde2b2515c

Attributes
  • url4cnc

    http://telegalive.top/agrybirdsgamerept

    http://toptelete.top/agrybirdsgamerept

    http://telegraf.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      b716ef0649230524ec8117ad8ea7b909.exe

    • Size

      424KB

    • MD5

      b716ef0649230524ec8117ad8ea7b909

    • SHA1

      9fb2745944a6a323196e76063d030ce40979a404

    • SHA256

      be4c0e3a5025c1cb1a5a4c17321a8412f2599ea5fa6c942c2339479e74a336af

    • SHA512

      e211ffc897ada42890bcb9e27b847647f52e3ecbe7562ca626ba5fbd61c00b3f00761a30668243ed904e63631fffab54023ef03b52fd1601ee5c8812f8818044

    Score
    10/10
    raccoon68e2d75238f7c69859792d206401b6bde2b2515cstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks