Overview

overview

10

Static

static

066dd25384...50.exe

windows7_x64

10

066dd25384...50.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    066dd2538407a6ae20996556d4f67d50

  • Size

    518KB

  • Sample

    220313-zywwmaacf8

  • MD5

    066dd2538407a6ae20996556d4f67d50

  • SHA1

    5586f384bb7441a529b4d4d24bb2f50578bf7f2a

  • SHA256

    30f8d690fcd9bc1e0020f6b3a916ad71e5b2df3cdb17e02e5a1565b579bf7319

  • SHA512

    a0500413cca66e65b5bd37a5ac444223dae2139df43c7797ec259e83825fb5b3041b32d88f460ba5092f9068b95cbf0c49200b6f60103be0ed4a09abb4f85a89

Score
10/10
raccoonccba3157b9f42051adf38fbb8f5d0aca7f2b7366stealer

Malware Config

Extracted

Family

raccoon

Botnet

ccba3157b9f42051adf38fbb8f5d0aca7f2b7366

Attributes
  • url4cnc

    http://185.163.204.81/nui8xtgen

    http://194.180.191.33/nui8xtgen

    http://174.138.11.98/nui8xtgen

    http://194.180.191.44/nui8xtgen

    http://91.219.236.120/nui8xtgen

    https://t.me/nui8xtgen

rc4.plain
rc4.plain

Targets

    • Target

      066dd2538407a6ae20996556d4f67d50

    • Size

      518KB

    • MD5

      066dd2538407a6ae20996556d4f67d50

    • SHA1

      5586f384bb7441a529b4d4d24bb2f50578bf7f2a

    • SHA256

      30f8d690fcd9bc1e0020f6b3a916ad71e5b2df3cdb17e02e5a1565b579bf7319

    • SHA512

      a0500413cca66e65b5bd37a5ac444223dae2139df43c7797ec259e83825fb5b3041b32d88f460ba5092f9068b95cbf0c49200b6f60103be0ed4a09abb4f85a89

    Score
    10/10
    raccoonccba3157b9f42051adf38fbb8f5d0aca7f2b7366stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks