Overview

overview

10

Static

static

1

Use_2024_A...1).rar

windows7-x64

10

Use_2024_A...1).rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Use_2024_As_Passw0rd(1).rar

  • Size

    17.7MB

  • Sample

    230510-16p9gscc7x

  • MD5

    21597608583ff900e22d9ef752f89865

  • SHA1

    425686012d63d31aaf20d8bf1ce73dfdda3606e1

  • SHA256

    62eed6ef3881ff1d829b73d374ae9e43ca5ac13fcfa4ed43adb7e4dc45385528

  • SHA512

    c8396d5e4acea54a20436fb71bdf254c35a217ce2fbb65070c48d9cb095169b1ec18654d5592fdda0564188f51cd77031ea2aee3b59a457730b84dede6d88345

  • SSDEEP

    393216:SwrZMzRWjvVp8J+/mcT0QVAr2mEFJEqQLTQXyX6sIxPpXDlxlHgTf+2GT:SwrXjvH8J+5T0rr27FOHpGpXDlHO+2w

Score
10/10
raccoon141e039951f226abafc9f26367487deastealer

Malware Config

Extracted

Family

raccoon

Botnet

141e039951f226abafc9f26367487dea

C2

http://37.220.87.68

http://83.217.11.14

http://94.142.138.125/
xor.plain

Targets

    • Target

      Use_2024_As_Passw0rd(1).rar

    • Size

      17.7MB

    • MD5

      21597608583ff900e22d9ef752f89865

    • SHA1

      425686012d63d31aaf20d8bf1ce73dfdda3606e1

    • SHA256

      62eed6ef3881ff1d829b73d374ae9e43ca5ac13fcfa4ed43adb7e4dc45385528

    • SHA512

      c8396d5e4acea54a20436fb71bdf254c35a217ce2fbb65070c48d9cb095169b1ec18654d5592fdda0564188f51cd77031ea2aee3b59a457730b84dede6d88345

    • SSDEEP

      393216:SwrZMzRWjvVp8J+/mcT0QVAr2mEFJEqQLTQXyX6sIxPpXDlxlHgTf+2GT:SwrXjvH8J+5T0rr27FOHpGpXDlHO+2w

    Score
    10/10
    raccoon141e039951f226abafc9f26367487deastealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks