Overview

overview

10

Static

static

SetupsMain.exe

windows7-x64

10

SetupsMain.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SetupsMain.7z

  • Size

    6.7MB

  • Sample

    221229-m19jaach45

  • MD5

    c98311578b4e10c321025afc418a1dde

  • SHA1

    d008be7b7690e0746098f3ef85578a6f2fcd27d7

  • SHA256

    e3d5b969d5bd23b7cb22197b532586739e4289111b2e462106f749e911bdbbe4

  • SHA512

    f6b41215be6cbcf19c1d1034751d16e52d0fc8c1e34649ce837dd7e8609bbe656036430bb3dcecf52a21108239a96292fbe6371af40fadd81835e18024664357

  • SSDEEP

    196608:Gv3AoDeuMiEG1VDkZcODMNbGUTqOD2E3T2DbZv:43A6euPRDkZcODMNbGUOODKx

Score
10/10
raccoonfdcd5174bda4142901af2b88c81d23a3stealer

Malware Config

Extracted

Family

raccoon

Botnet

fdcd5174bda4142901af2b88c81d23a3

C2

http://193.43.147.135/

rc4.plain

Targets

    • Target

      SetupsMain.exe

    • Size

      726.9MB

    • MD5

      01be7b2bdef0347359a1c54c33d62204

    • SHA1

      4f4c6d216d4fe3ba4c0109c6b6a4580682ca6abc

    • SHA256

      bf4aba9f0c7a810e11d16d3532cd44db6b46f9de0950456480acc269b6a0e93c

    • SHA512

      6acec239a50088424925bca63d05e43c4f0854aabdf8daab4d85a3133ecd2c0f161e69facc1c9d6d9e0d5c086f90e66a1204afa3d2d0b35b7151e5d087af1318

    • SSDEEP

      98304:yYf+IGc7eLclAihbR8xUx9aF5qSbxQwm5/xzOoCJudgayTq2mF/WEKhZ0zftZZI/:HG+e4CWKxmaF0SbxVmPgayTq2g+ubO/

    Score
    10/10
    raccoonfdcd5174bda4142901af2b88c81d23a3stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks