raccoon | c96bc659a9f882f78b018eb6af1abddb4a1ffe7f959f056450399c27b97f70c8 | Triage

Submit
Reports

Overview

overview

Static

static

3

df14756a07...dc.exe

windows7-x64

df14756a07...dc.exe

windows10-2004-x64

Sharing

General

Target

df14756a07d42a0e64b86e1c1038a1dc.exe
Size

226KB
Sample

230620-gm1rbsbc7w
MD5

df14756a07d42a0e64b86e1c1038a1dc
SHA1

f7e8a179137b00bc327e3b3d6cdd9f8ab23c7d6f
SHA256

c96bc659a9f882f78b018eb6af1abddb4a1ffe7f959f056450399c27b97f70c8
SHA512

aee0e5542e6aa3e1f2d1c13edc61faa274e96150d8c5ca635b08852360fb763711d789b3f9fd53c9146eb61565f973b302ea22818c3490c725a007ae4ba0a479
SSDEEP

3072:0uEDVbCO4SRf0ryEiiiiiiiinVbf+Hcr7nTolCg/hP9hxbukTWMxkjAs1o4:rudCO4SRfZMiuE/B9hxbuUWh

Score

10^/10

raccoon discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

df14756a07d42a0e64b86e1c1038a1dc.exe

Resource

win7-20230220-en

raccoon discovery spyware stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

df14756a07d42a0e64b86e1c1038a1dc.exe

Resource

win10v2004-20230220-en

raccoon discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  df14756a07d42a0e64b86e1c1038a1dc.exe
- Size
  
  226KB
- MD5
  
  df14756a07d42a0e64b86e1c1038a1dc
- SHA1
  
  f7e8a179137b00bc327e3b3d6cdd9f8ab23c7d6f
- SHA256
  
  c96bc659a9f882f78b018eb6af1abddb4a1ffe7f959f056450399c27b97f70c8
- SHA512
  
  aee0e5542e6aa3e1f2d1c13edc61faa274e96150d8c5ca635b08852360fb763711d789b3f9fd53c9146eb61565f973b302ea22818c3490c725a007ae4ba0a479
- SSDEEP
  
  3072:0uEDVbCO4SRf0ryEiiiiiiiinVbf+Hcr7nTolCg/hP9hxbukTWMxkjAs1o4:rudCO4SRfZMiuE/B9hxbuUWh
Score

10^/10

raccoon discovery spyware stealer
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Raccoon Stealer payload
- Downloads MZ/PE file
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

raccoondiscoveryspywarestealer

behavioral2

raccoondiscoveryspywarestealer

© 2018-2024

Terms | Privacy