Overview

overview

10

Static

static

3

9d05e8ef93...04.exe

windows7-x64

10

9d05e8ef93...04.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d05e8ef93511f02e7f0d2704.exe

  • Size

    3.5MB

  • Sample

    230709-jlsensca7x

  • MD5

    7aa8353d95576dfdd42d2382ffe0e626

  • SHA1

    9798cd96ca573c6f54fc84611cfc4a7802212dea

  • SHA256

    9d05e8ef93511f02e7f0d270402b37658817a2d233f9cd12b40b87d4a4af7a77

  • SHA512

    f536592a62c5b510f05dc05b866c59557a7246052605551d364c4c1a9d9f8b94f01dbd3cf8526e4a5bded4dd81791923f14f424310d712306b523c3aca8bbc64

  • SSDEEP

    24576:yqCSpM9XJSnFTGkzgB3uz60e5Lb1HCfLSovTaCqbvF+WKzQqW/pt64Y5v7QHuHOa:yqCgHny3COVb1HCfLpv

Score
10/10
raccoonfa72f4c1fbe65cee8651140fd47267bastealer

Malware Config

Extracted

Family

raccoon

Botnet

fa72f4c1fbe65cee8651140fd47267ba

C2

http://193.142.147.59:80

xor.plain

Targets

    • Target

      9d05e8ef93511f02e7f0d2704.exe

    • Size

      3.5MB

    • MD5

      7aa8353d95576dfdd42d2382ffe0e626

    • SHA1

      9798cd96ca573c6f54fc84611cfc4a7802212dea

    • SHA256

      9d05e8ef93511f02e7f0d270402b37658817a2d233f9cd12b40b87d4a4af7a77

    • SHA512

      f536592a62c5b510f05dc05b866c59557a7246052605551d364c4c1a9d9f8b94f01dbd3cf8526e4a5bded4dd81791923f14f424310d712306b523c3aca8bbc64

    • SSDEEP

      24576:yqCSpM9XJSnFTGkzgB3uz60e5Lb1HCfLSovTaCqbvF+WKzQqW/pt64Y5v7QHuHOa:yqCgHny3COVb1HCfLpv

    Score
    10/10
    raccoonfa72f4c1fbe65cee8651140fd47267bastealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks