Overview

overview

10

Static

static

c1f129c725...94.exe

windows7_x64

10

c1f129c725...94.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c1f129c7254829fa7f7e177b6ea28e94.exe
  • Size 1.0MB
  • Sample220210-tf782shae4
  • SHA256 5dc7331a3854d359e2813683cfd477ba76e25ce24fea278cbd2d8a5fe37fdd97
  • MD5 SHA1 SHA512
Score
10/10
raccoon8340184732ea803d792166f3ef5f437d323c990bstealer

Malware Config

Extracted

Family

  • raccoon

Version

  • 1.8.5

Botnet

  • 8340184732ea803d792166f3ef5f437d323c990b

Attributes
  • url4cnc

    http://188.166.1.115/sandysysmanch1

    http://91.219.236.139/sandysysmanch1

    http://194.180.174.147/sandysysmanch1

    http://185.3.95.153/sandysysmanch1

    http://185.163.204.22/sandysysmanch1

    https://t.me/sandysysmanch1

rc4.plain
rc4.plain

Targets

    • Target
      c1f129c7254829fa7f7e177b6ea28e94.exe
    • Size 1.0MB
    • SHA256 5dc7331a3854d359e2813683cfd477ba76e25ce24fea278cbd2d8a5fe37fdd97
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon8340184732ea803d792166f3ef5f437d323c990bstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks