General

  • Target

    55fe74a5a7c55200744fa49d7aa10a09.exe

  • Size

    221KB

  • Sample

    230624-z7a1hscd44

  • MD5

    55fe74a5a7c55200744fa49d7aa10a09

  • SHA1

    79cb3247a28d4e9d70feb2e43c56b090f81f90de

  • SHA256

    ca2b5c5792b601cf1f3f9951078a220cca8a11953b2d8dc506b7114ecf641d8b

  • SHA512

    56fa680a017b6e77b958cf5e1c2be42f0c1ac38c2151043bf11ffd57d0a30651ba24378aae0d26a5f8618db1bdfe239030b3353d002336b48aa1fee47860ebce

  • SSDEEP

    3072:5a80PtUgNACQhSKJ/4T2bpZKO1nIaXq0X0zz/HWb5lgs5SJ:70PMCQhSKJM2bpZKOBIaa06k5

Malware Config

Targets

    • Target

      55fe74a5a7c55200744fa49d7aa10a09.exe

    • Size

      221KB

    • MD5

      55fe74a5a7c55200744fa49d7aa10a09

    • SHA1

      79cb3247a28d4e9d70feb2e43c56b090f81f90de

    • SHA256

      ca2b5c5792b601cf1f3f9951078a220cca8a11953b2d8dc506b7114ecf641d8b

    • SHA512

      56fa680a017b6e77b958cf5e1c2be42f0c1ac38c2151043bf11ffd57d0a30651ba24378aae0d26a5f8618db1bdfe239030b3353d002336b48aa1fee47860ebce

    • SSDEEP

      3072:5a80PtUgNACQhSKJ/4T2bpZKO1nIaXq0X0zz/HWb5lgs5SJ:70PMCQhSKJM2bpZKOBIaa06k5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks