raccoon | 6423cea1a599576d632e8eae732b6f793908c58a45019aeed428907020bc0a3a | Triage

Sharing

General

Target

6423cea1a599576d632e8eae732b6f793908c58a45019aeed428907020bc0a3a
Size

732.7MB
Sample

230312-2fcq5shg21
MD5

494ea28bf8243f9dc7b93fced9f4a388
SHA1

cfa0518b4f82ee22525673d94b4bfc5df61ed59f
SHA256

6423cea1a599576d632e8eae732b6f793908c58a45019aeed428907020bc0a3a
SHA512

7ab25192306d19a8bac50b7c80bb4c46b8362d98032551c63b7e99bb9ef47fcdaf95d6c569524eb6e77d00a3dc71e18493b3534a43a9536a9fb35921e1319676
SSDEEP

393216:OX520KzlIOxqMMB8PnXDU3T6XCkR0XCbivMNt:W8RJIkqlBQu6XCkRhbN

Score

10^/10

raccoon 540b1db0b12b23e63e6942952aa03e47 stealer

Malware Config

Extracted

Family

raccoon

Botnet

540b1db0b12b23e63e6942952aa03e47

C2

http://37.220.87.66/

http://77.73.134.0/

rc4.plain

Targets

- Target
  
  6423cea1a599576d632e8eae732b6f793908c58a45019aeed428907020bc0a3a
- Size
  
  732.7MB
- MD5
  
  494ea28bf8243f9dc7b93fced9f4a388
- SHA1
  
  cfa0518b4f82ee22525673d94b4bfc5df61ed59f
- SHA256
  
  6423cea1a599576d632e8eae732b6f793908c58a45019aeed428907020bc0a3a
- SHA512
  
  7ab25192306d19a8bac50b7c80bb4c46b8362d98032551c63b7e99bb9ef47fcdaf95d6c569524eb6e77d00a3dc71e18493b3534a43a9536a9fb35921e1319676
- SSDEEP
  
  393216:OX520KzlIOxqMMB8PnXDU3T6XCkR0XCbivMNt:W8RJIkqlBQu6XCkRhbN
Score

10^/10

raccoon 540b1db0b12b23e63e6942952aa03e47 stealer
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

raccoon540b1db0b12b23e63e6942952aa03e47stealer