Overview

overview

10

Static

static

1

a02b961c3e...28.exe

windows7-x64

10

a02b961c3e...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc46af138f661c31bd23dfed643aec0c.bin

  • Size

    560KB

  • Sample

    230206-mcghladd79

  • MD5

    6d9fbd0d808063fe6b460cacdb08e897

  • SHA1

    efccedbd0cafe647fd9f1066b711e58bbf64aaae

  • SHA256

    7089ad447bc518385d3858e983df63e7cb011e518beb4ed4117d7496a5fd28b1

  • SHA512

    3d8daf4a189c8dcbf18cbf2b781f904ad187c646bbe5b3b76260ef6f294841f3ea7c2fef1004f6817f4d77d5e696b12b6d0cf4524f8ec3e3dcde87eaa7b499ae

  • SSDEEP

    12288:NTnh+zTpvLzXXCS+Yxc/5qWIhMhGapwMXYdTp5/WqtVIMRREo+:dGXSSxxK5qDhMhG8wMOXWSVIMM

Score
10/10
raccooncabcf15ea37a24b58186813d42a6971fstealer

Malware Config

Extracted

Family

raccoon

Botnet

cabcf15ea37a24b58186813d42a6971f

C2

http://83.217.11.16/

rc4.plain

Targets

    • Target

      a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828.exe

    • Size

      830KB

    • MD5

      bc46af138f661c31bd23dfed643aec0c

    • SHA1

      db363d46dfb756f97c7cfb3b0be91d1af5200a6b

    • SHA256

      a02b961c3ee8f672f06eae019c1b5c1c753126b95edeb57458fea177f1f08828

    • SHA512

      5c6171875162886b678daa1d4096b3c3ef0bc60fb83f7528c31eaa73c2def7adf4adb51cd858223690e9b684dce446811132bb8bfee5db78a478c77cc0b003c3

    • SSDEEP

      24576:K2zMwwTlE32rV9AFLVGpMo5c+idrNtNNx8qR1g:3wTlOEsMK8c9dd4

    Score
    10/10
    raccooncabcf15ea37a24b58186813d42a6971fstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks