raccoon | efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9 | Triage

Sharing

General

Target

efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
Size

1.6MB
Sample

221125-zqmyraee29
MD5

edba583f1dc93fb81750278507d21a56
SHA1

9777f04f51c292ae6943d093aae76dd5fab3c7ca
SHA256

efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
SHA512

00087da125d6f041802287d2475cd30f41eedb09ebba001c55f0e08e89c2b5f865c7c38368f9f22cdd33e4d79b3d5bbac044126275122c2c872c2fdae724494a
SSDEEP

49152:b3kpPSVcsWAZpBjgO7HGZPL79fyaQtirOF:b3kpWcbAZpB7atH9fQt

Score

10^/10

raccoon bootkit persistence stealer

Malware Config

Targets

- Target
  
  efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
- Size
  
  1.6MB
- MD5
  
  edba583f1dc93fb81750278507d21a56
- SHA1
  
  9777f04f51c292ae6943d093aae76dd5fab3c7ca
- SHA256
  
  efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
- SHA512
  
  00087da125d6f041802287d2475cd30f41eedb09ebba001c55f0e08e89c2b5f865c7c38368f9f22cdd33e4d79b3d5bbac044126275122c2c872c2fdae724494a
- SSDEEP
  
  49152:b3kpPSVcsWAZpBjgO7HGZPL79fyaQtirOF:b3kpWcbAZpB7atH9fQt
Score

10^/10

raccoon bootkit persistence stealer
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

raccoonbootkitpersistencestealer

behavioral2

raccoonbootkitpersistencestealer