Overview

overview

10

Static

static

07a0f741d2...ed.exe

windows7_x64

10

07a0f741d2...ed.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07a0f741d265effa47ddd37ffcd92029535d0f8dc6b90ca43f753292768368ed

  • Size

    596KB

  • Sample

    220531-bmv8ysdfer

  • MD5

    ccf9b8247afa3a47a6867f2164f235dd

  • SHA1

    98ed0421e118c8e3c0075631c58ad837175d13c6

  • SHA256

    07a0f741d265effa47ddd37ffcd92029535d0f8dc6b90ca43f753292768368ed

  • SHA512

    ac89f3362f1481a61ae0303da707430001d7a3f948678e7f91c5b2172757d81537ac12b3a81913d7132f0d26813ed4566e597feb0150e36e06e36c71a073576c

Score
10/10
raccoond5fd0978f375b4c26af90035e90f506a7d35fc8cstealer

Malware Config

Extracted

Family

raccoon

Botnet

d5fd0978f375b4c26af90035e90f506a7d35fc8c

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1LsajrcmIAxXH1jkaNqtfZTdiUG11uAJ5

rc4.plain
rc4.plain

Targets

    • Target

      07a0f741d265effa47ddd37ffcd92029535d0f8dc6b90ca43f753292768368ed

    • Size

      596KB

    • MD5

      ccf9b8247afa3a47a6867f2164f235dd

    • SHA1

      98ed0421e118c8e3c0075631c58ad837175d13c6

    • SHA256

      07a0f741d265effa47ddd37ffcd92029535d0f8dc6b90ca43f753292768368ed

    • SHA512

      ac89f3362f1481a61ae0303da707430001d7a3f948678e7f91c5b2172757d81537ac12b3a81913d7132f0d26813ed4566e597feb0150e36e06e36c71a073576c

    Score
    10/10
    raccoond5fd0978f375b4c26af90035e90f506a7d35fc8cstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Raccoon Stealer Payload

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks