General

  • Target

    bd016c8a81dbbbb6f8b5d41e6003b12d.exe

  • Size

    252KB

  • Sample

    230623-ghrmvsdf6s

  • MD5

    bd016c8a81dbbbb6f8b5d41e6003b12d

  • SHA1

    913686c51a5e22436ab21400f8e866fd5df01f56

  • SHA256

    b777ca54d5d8a17240013432313cdd8068ae03e04e97dbd8dc1f4268964a6526

  • SHA512

    cb986ff7fc5a03d29c1237b2ad10b4b4b28f00c6011782668dfc87ca48a06b1942ddd10982e2178bc158662c690c95e74a885d0129e4f10e46eacae338eb2e29

  • SSDEEP

    6144:ZUhgWSR44PGyleq0SBHeZvBcjC9mUWpu:GCEU

Malware Config

Targets

    • Target

      bd016c8a81dbbbb6f8b5d41e6003b12d.exe

    • Size

      252KB

    • MD5

      bd016c8a81dbbbb6f8b5d41e6003b12d

    • SHA1

      913686c51a5e22436ab21400f8e866fd5df01f56

    • SHA256

      b777ca54d5d8a17240013432313cdd8068ae03e04e97dbd8dc1f4268964a6526

    • SHA512

      cb986ff7fc5a03d29c1237b2ad10b4b4b28f00c6011782668dfc87ca48a06b1942ddd10982e2178bc158662c690c95e74a885d0129e4f10e46eacae338eb2e29

    • SSDEEP

      6144:ZUhgWSR44PGyleq0SBHeZvBcjC9mUWpu:GCEU

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks