Overview

overview

10

Static

static

f0675a3457...c4.exe

windows7_x64

10

f0675a3457...c4.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0675a345759fed3eae6fc51c71b19c4.exe

  • Size

    421KB

  • Sample

    211104-vxkdzsecbn

  • MD5

    f0675a345759fed3eae6fc51c71b19c4

  • SHA1

    89911cec0439cb423742d6615f64e13fa3065753

  • SHA256

    e040228b7cce711e455d0772d77287448cf14eea496563a3474c69565cc441d3

  • SHA512

    465f3076a93540b40e3a9e54c115ac018274658378603226ec534fc5f6e09978cc68d38caa328bc20c46d0069a567bff758b08c6328829378b4704e674a755ea

Score
10/10
raccoonb3ed1d79826001317754d88a62db05820a1ecd19stealer

Malware Config

Extracted

Family

raccoon

Botnet

b3ed1d79826001317754d88a62db05820a1ecd19

Attributes
  • url4cnc

    http://teleliver.top/agrybirdsgamerept

    http://livetelive.top/agrybirdsgamerept

    http://teleger.top/agrybirdsgamerept

    http://telestrong.top/agrybirdsgamerept

    http://tgrampro.top/agrybirdsgamerept

    http://teleghost.top/agrybirdsgamerept

    http://teleroom.top/agrybirdsgamerept

    http://telemir.top/agrybirdsgamerept

    http://teletelo.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      f0675a345759fed3eae6fc51c71b19c4.exe

    • Size

      421KB

    • MD5

      f0675a345759fed3eae6fc51c71b19c4

    • SHA1

      89911cec0439cb423742d6615f64e13fa3065753

    • SHA256

      e040228b7cce711e455d0772d77287448cf14eea496563a3474c69565cc441d3

    • SHA512

      465f3076a93540b40e3a9e54c115ac018274658378603226ec534fc5f6e09978cc68d38caa328bc20c46d0069a567bff758b08c6328829378b4704e674a755ea

    Score
    10/10
    raccoonb3ed1d79826001317754d88a62db05820a1ecd19stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks