Overview

overview

10

Static

static

3

055fe92d19...29.exe

windows7-x64

10

055fe92d19...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    055fe92d19f804a8ace1edf70a937829.exe

  • Size

    236KB

  • Sample

    230623-staz2aff47

  • MD5

    055fe92d19f804a8ace1edf70a937829

  • SHA1

    d24f4a1ef6f892918159a28ffcab84d108b9873a

  • SHA256

    a7e5b32109ef08c9950f9885208a11c8a9b5963c7a3aa5e77926515382d60fbd

  • SHA512

    f11c35b089c7b8ff26db17567f8ccf5bdcbf6b18333af0b5a3f4186ab78c74fa1151fb3f77cddc132cf8c0427a557ae91a79609899d478e509383c8bab8f751b

  • SSDEEP

    3072:mAPKN1jbrG8KrZlIJVg0g9fXOKCZmP8T4xoK8+IVTuKGCSpq2H702:jKN1rG8KrIJVBg9ferZm7OKUirNb

Score
10/10
raccoondiscoveryspywarestealer

Malware Config

Targets

    • Target

      055fe92d19f804a8ace1edf70a937829.exe

    • Size

      236KB

    • MD5

      055fe92d19f804a8ace1edf70a937829

    • SHA1

      d24f4a1ef6f892918159a28ffcab84d108b9873a

    • SHA256

      a7e5b32109ef08c9950f9885208a11c8a9b5963c7a3aa5e77926515382d60fbd

    • SHA512

      f11c35b089c7b8ff26db17567f8ccf5bdcbf6b18333af0b5a3f4186ab78c74fa1151fb3f77cddc132cf8c0427a557ae91a79609899d478e509383c8bab8f751b

    • SSDEEP

      3072:mAPKN1jbrG8KrZlIJVg0g9fXOKCZmP8T4xoK8+IVTuKGCSpq2H702:jKN1rG8KrIJVBg9ferZm7OKUirNb

    Score
    10/10
    raccoondiscoveryspywarestealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks