Overview

overview

10

Static

static

mixfive_20...50.exe

windows7_x64

10

mixfive_20...50.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mixfive_20220104-211350

  • Size

    737KB

  • Sample

    220104-zjxjlshec9

  • MD5

    0fa6313e2e4579324a00e68dacb88189

  • SHA1

    f34a44e23ade24b55ab51b9141788282c2d0f827

  • SHA256

    d335750b80dcfdc3d70a85bbd28a18cc6c192f0c1a880f2921d7a41b767cb49f

  • SHA512

    10751a887ccbf2b9ec8aedbe7d450162e678447d4065d17ff05bf0b0feb0ba08aaba3bfad9c25d979f8cd14c4dccf6bd7f9185f2d461c7b67f70948c8e0587ce

Score
10/10
raccoon10da56e7e71e97bdc1f36eb76813bbc3231de7e4stealer

Malware Config

Extracted

Family

raccoon

Botnet

10da56e7e71e97bdc1f36eb76813bbc3231de7e4

Attributes
  • url4cnc

    http://194.180.174.53/capibar

    http://91.219.236.18/capibar

    http://194.180.174.41/capibar

    http://91.219.236.148/capibar

    https://t.me/capibar

rc4.plain
rc4.plain

Targets

    • Target

      mixfive_20220104-211350

    • Size

      737KB

    • MD5

      0fa6313e2e4579324a00e68dacb88189

    • SHA1

      f34a44e23ade24b55ab51b9141788282c2d0f827

    • SHA256

      d335750b80dcfdc3d70a85bbd28a18cc6c192f0c1a880f2921d7a41b767cb49f

    • SHA512

      10751a887ccbf2b9ec8aedbe7d450162e678447d4065d17ff05bf0b0feb0ba08aaba3bfad9c25d979f8cd14c4dccf6bd7f9185f2d461c7b67f70948c8e0587ce

    Score
    10/10
    raccoon10da56e7e71e97bdc1f36eb76813bbc3231de7e4stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks