Overview

overview

10

Static

static

1f7b4f7177...63.exe

windows7_x64

10

1f7b4f7177...63.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f7b4f7177a601ba168f0aea91ea7f3e517cde434fbd30e6417a757e85d16663

  • Size

    530KB

  • Sample

    220310-gwbhssecc3

  • MD5

    9cd9732ea1c49d25da58c676adb6e842

  • SHA1

    117233eb13fe735d57532f48aa6338edae9383b5

  • SHA256

    41e2f3775ded4cf12367fca6d2ccf94b2978e10195eee4879ac5e199d79358a1

  • SHA512

    052abe4ca344461a205e969c492b2a7a5921dbcec35d9d0950ee3f8c368abf50c3155889d8d7c4e9c4048bb0a62fc969e097dc0df869b3589a03a07704b1baf9

Score
10/10
raccoon1c0fad6805a0f65d7b597130eb9f089ffbe9857dstealer

Malware Config

Extracted

Family

raccoon

Botnet

1c0fad6805a0f65d7b597130eb9f089ffbe9857d

Attributes
  • url4cnc

    http://194.180.191.241/capibar

    http://103.155.93.35/capibar

    https://t.me/capibar

rc4.plain
rc4.plain

Targets

    • Target

      1f7b4f7177a601ba168f0aea91ea7f3e517cde434fbd30e6417a757e85d16663

    • Size

      724KB

    • MD5

      ee252c585d12552ccae1c900e5e97026

    • SHA1

      9e9c72184715f5f8ab4808b08fb9c3ab1d725827

    • SHA256

      1f7b4f7177a601ba168f0aea91ea7f3e517cde434fbd30e6417a757e85d16663

    • SHA512

      7403f211b952a2ac4d127c4d85fca5fb4024f713fd355cb91827aee296c33be736e6e355f9fb0ccc1d9265c33faa857015248a7f930a6514933721c86518c96c

    Score
    10/10
    raccoon1c0fad6805a0f65d7b597130eb9f089ffbe9857dstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks