Overview

overview

10

Static

static

1

6c8a2cea4d...c1.exe

windows7-x64

10

6c8a2cea4d...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6c8a2cea4dbf018262fc7ccf569de510c0a58612806a2be73a68d82f7b05d1c1
  • Size 3.4MB
  • Sample230612-3jvlsseb65
  • SHA256 6c8a2cea4dbf018262fc7ccf569de510c0a58612806a2be73a68d82f7b05d1c1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoonf80018d0f7c5463eabb5c698eb201532stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • f80018d0f7c5463eabb5c698eb201532

C2

  • http://5.42.65.18:80/

  • http://5.42.64.13:80/

  • http://5.42.65.17:80/

  • http://5.42.65.12:80/

xor.plain

Targets

    • Target
      6c8a2cea4dbf018262fc7ccf569de510c0a58612806a2be73a68d82f7b05d1c1
    • Size 3.4MB
    • SHA256 6c8a2cea4dbf018262fc7ccf569de510c0a58612806a2be73a68d82f7b05d1c1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    raccoonf80018d0f7c5463eabb5c698eb201532stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks