raccoon | a6712cc5bb89ce645f7b728dc09ad596c472269047b92dc7a78647ef35d8b207 | Triage

Resubmissions

16-03-2023 14:47

230316-r5616sdf3z 10

16-03-2023 02:10

230316-clpv8aag5t 5

16-03-2023 02:06

230316-cjjw7agd86 5

Sharing

General

Target

Setup_File.exe
Size

14.0MB
Sample

230316-r5616sdf3z
MD5

f0ae2eb9a330c4e7855920e11cd39af7
SHA1

21ca688f5621e1a7a42f77737aca97a75db9c8c9
SHA256

a6712cc5bb89ce645f7b728dc09ad596c472269047b92dc7a78647ef35d8b207
SHA512

ce087c891a8b761a46231f06d051e2eb01bfc5fd302edd41d838e5794ee48a1ae4067fab7335e67844bea189a21cba97d4858a4bf66e9480a5c4c7ec65f6df2a
SSDEEP

393216:01HDjf9KSKyjGqVMJhDsFaexxanAkEpWBXJi+:Kjjf9inhuDLanAkdXA

Score

10^/10

raccoon 01ce0bf18c5eb0152a13b2ee5d4d8adc stealer

Malware Config

Extracted

Family

raccoon

Botnet

01ce0bf18c5eb0152a13b2ee5d4d8adc

C2

http://83.217.11.31/

http://83.217.11.32/

http://83.217.11.13

rc4.plain

Targets

- Target
  
  Setup_File.exe
- Size
  
  14.0MB
- MD5
  
  f0ae2eb9a330c4e7855920e11cd39af7
- SHA1
  
  21ca688f5621e1a7a42f77737aca97a75db9c8c9
- SHA256
  
  a6712cc5bb89ce645f7b728dc09ad596c472269047b92dc7a78647ef35d8b207
- SHA512
  
  ce087c891a8b761a46231f06d051e2eb01bfc5fd302edd41d838e5794ee48a1ae4067fab7335e67844bea189a21cba97d4858a4bf66e9480a5c4c7ec65f6df2a
- SSDEEP
  
  393216:01HDjf9KSKyjGqVMJhDsFaexxanAkEpWBXJi+:Kjjf9inhuDLanAkdXA
Score

10^/10

raccoon 01ce0bf18c5eb0152a13b2ee5d4d8adc stealer
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

raccoon01ce0bf18c5eb0152a13b2ee5d4d8adcstealer