Overview

overview

10

Static

static

649982bca8...87.exe

windows7-x64

10

649982bca8...87.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    649982bca8732a94d5f1e9cc3d87045e3aff04687080036bed0ba298e7957e87

  • Size

    830KB

  • Sample

    220930-ghtr8acfd6

  • MD5

    eb5fcfda27dd7dba6489e9235cb0ebb3

  • SHA1

    214d444e61f2ce14eda1d8eb8d6cc46649e67f36

  • SHA256

    649982bca8732a94d5f1e9cc3d87045e3aff04687080036bed0ba298e7957e87

  • SHA512

    0c03ec4898e15e6d8002477433620feb5f2ecf6f98614691c92f81c81922707b7589523c0b172854fa0bd3f47680b4219c18f04fc26a06ff529c77bcf276a172

  • SSDEEP

    12288:MMN7mUCD1sJ86iVAClceomYDjPVnsOUErboVyj4Q/:z7mTWgVPl9ofDe0HPjj

Score
10/10
raccoon5eaa41b3101d5537f786a35da1878f0d1d760e53stealer

Malware Config

Extracted

Family

raccoon

Version

1.7.1-hotfix

Botnet

5eaa41b3101d5537f786a35da1878f0d1d760e53

Attributes
  • url4cnc

    https://telete.in/jbitchsucks

rc4.plain
rc4.plain

Targets

    • Target

      649982bca8732a94d5f1e9cc3d87045e3aff04687080036bed0ba298e7957e87

    • Size

      830KB

    • MD5

      eb5fcfda27dd7dba6489e9235cb0ebb3

    • SHA1

      214d444e61f2ce14eda1d8eb8d6cc46649e67f36

    • SHA256

      649982bca8732a94d5f1e9cc3d87045e3aff04687080036bed0ba298e7957e87

    • SHA512

      0c03ec4898e15e6d8002477433620feb5f2ecf6f98614691c92f81c81922707b7589523c0b172854fa0bd3f47680b4219c18f04fc26a06ff529c77bcf276a172

    • SSDEEP

      12288:MMN7mUCD1sJ86iVAClceomYDjPVnsOUErboVyj4Q/:z7mTWgVPl9ofDe0HPjj

    Score
    10/10
    raccoon5eaa41b3101d5537f786a35da1878f0d1d760e53stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks