Overview

overview

10

Static

static

af7a6ee0ab...d0.exe

windows7_x64

10

af7a6ee0ab...d0.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    af7a6ee0abf990315cc0dbdd73aaddd0.exe
  • Size 494KB
  • Sample220209-vfpx5sbbfr
  • SHA256 ee293203476eb8ec6158876b33a077ceeba8712de8d8e0d1c0aa665f752ef045
  • MD5 SHA1 SHA512
Score
10/10
raccoon83cfb769b52e38c2c41c934d97e1151f0b5c68a2stealersuricata

Malware Config

Extracted

Family

  • raccoon

Version

  • 1.8.5

Botnet

  • 83cfb769b52e38c2c41c934d97e1151f0b5c68a2

Attributes
  • url4cnc

    http://194.180.191.149/nixsmasterbaks2

    http://103.155.93.247/nixsmasterbaks2

    https://t.me/nixsmasterbaks2

rc4.plain
rc4.plain

Targets

    • Target
      af7a6ee0abf990315cc0dbdd73aaddd0.exe
    • Size 494KB
    • SHA256 ee293203476eb8ec6158876b33a077ceeba8712de8d8e0d1c0aa665f752ef045
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon83cfb769b52e38c2c41c934d97e1151f0b5c68a2stealersuricata

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • suricata: ET MALWARE Win32.Raccoon Stealer Checkin M6

      suricata: ET MALWARE Win32.Raccoon Stealer Checkin M6

      suricata
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks