Overview

overview

10

Static

static

1

bc46af138f...0c.exe

windows7-x64

10

bc46af138f...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc46af138f661c31bd23dfed643aec0c.exe

  • Size

    830KB

  • Sample

    230202-y15e4sfc84

  • MD5

    bc46af138f661c31bd23dfed643aec0c

  • SHA1

    db363d46dfb756f97c7cfb3b0be91d1af5200a6b

  • SHA256

    a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828

  • SHA512

    5c6171875162886b678daa1d4096b3c3ef0bc60fb83f7528c31eaa73c2def7adf4adb51cd858223690e9b684dce446811132bb8bfee5db78a478c77cc0b003c3

  • SSDEEP

    24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4

Score
10/10
raccooncabcf15ea37a24b58186813d42a6971fstealer

Malware Config

Extracted

Family

raccoon

Botnet

cabcf15ea37a24b58186813d42a6971f

C2

http://83.217.11.16/

rc4.plain

Targets

    • Target

      bc46af138f661c31bd23dfed643aec0c.exe

    • Size

      830KB

    • MD5

      bc46af138f661c31bd23dfed643aec0c

    • SHA1

      db363d46dfb756f97c7cfb3b0be91d1af5200a6b

    • SHA256

      a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828

    • SHA512

      5c6171875162886b678daa1d4096b3c3ef0bc60fb83f7528c31eaa73c2def7adf4adb51cd858223690e9b684dce446811132bb8bfee5db78a478c77cc0b003c3

    • SSDEEP

      24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4

    Score
    10/10
    raccooncabcf15ea37a24b58186813d42a6971fstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks