Overview

overview

10

Static

static

1

Use_91001_...rd.rar

windows7-x64

10

Use_91001_...rd.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Use_91001_As_Passw0rd.rar

  • Size

    17.0MB

  • Sample

    230326-bcdwxseh55

  • MD5

    be9d7d22d6dbefe4bbd3c34945e5efcd

  • SHA1

    da34fd40fbe5bbb7872d116f8bdcda2ecd63a2c3

  • SHA256

    d7810de53b51fc9b27224b3ea53e96a28d14181928d41e4c5607f415393efbc9

  • SHA512

    667fe54f61636e8ead2974cfbdcf0b861622f1d0c7499dfc555930c3e269c8f7399ec718a83cd8c3c51f03b3c795c91a740a842ec943f6bcf00d78f564c094ae

  • SSDEEP

    393216:VRuliVPjMulmkaQznQGlH7XXBiUXend3fIr3vIiw0qLGpE4Y:VRvVAkEQzQobnBiUunK8G64Y

Score
10/10
raccoon01ce0bf18c5eb0152a13b2ee5d4d8adcstealer

Malware Config

Extracted

Family

raccoon

Botnet

01ce0bf18c5eb0152a13b2ee5d4d8adc

C2

http://37.220.87.69

http://83.217.11.6
rc4.plain

Targets

    • Target

      Use_91001_As_Passw0rd.rar

    • Size

      17.0MB

    • MD5

      be9d7d22d6dbefe4bbd3c34945e5efcd

    • SHA1

      da34fd40fbe5bbb7872d116f8bdcda2ecd63a2c3

    • SHA256

      d7810de53b51fc9b27224b3ea53e96a28d14181928d41e4c5607f415393efbc9

    • SHA512

      667fe54f61636e8ead2974cfbdcf0b861622f1d0c7499dfc555930c3e269c8f7399ec718a83cd8c3c51f03b3c795c91a740a842ec943f6bcf00d78f564c094ae

    • SSDEEP

      393216:VRuliVPjMulmkaQznQGlH7XXBiUXend3fIr3vIiw0qLGpE4Y:VRvVAkEQzQobnBiUunK8G64Y

    Score
    10/10
    raccoon01ce0bf18c5eb0152a13b2ee5d4d8adcstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks