raccoon | 2944952348c7d345f2205f72497251a03e3713298b561519f65d682728151012 | Triage

Sharing

General

Target

efcd1876a1e120794eaf59ca2469ab9c.exe
Size

582KB
Sample

240109-w2vwysgeh5
MD5

efcd1876a1e120794eaf59ca2469ab9c
SHA1

60b7f29f8ffb82dac8b6f0c6d5a31ec11df682b8
SHA256

2944952348c7d345f2205f72497251a03e3713298b561519f65d682728151012
SHA512

821ddf53dfec8ca5e3b9eb803ae389e1d72fc7c2f639fd5c937106bb32e0a9068eb1102cbce874599fbf81899c67c0b118a0521046f809e2e1f6fd356aa8980f
SSDEEP

12288:uMN5gOKX5piYSMPMHoyevdlIk1MqFrLCc/ErTvHWv6TA:uSKX5p75yeDMqFrLB/ErTvZ

Score

10^/10

raccoon cd8dc1031358b1aec55cc6bc447df1018b068607 stealer

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes

url4cnc
https://telete.in/jagressor_kz

rc4.plain

rc4.plain

Targets

- Target
  
  efcd1876a1e120794eaf59ca2469ab9c.exe
- Size
  
  582KB
- MD5
  
  efcd1876a1e120794eaf59ca2469ab9c
- SHA1
  
  60b7f29f8ffb82dac8b6f0c6d5a31ec11df682b8
- SHA256
  
  2944952348c7d345f2205f72497251a03e3713298b561519f65d682728151012
- SHA512
  
  821ddf53dfec8ca5e3b9eb803ae389e1d72fc7c2f639fd5c937106bb32e0a9068eb1102cbce874599fbf81899c67c0b118a0521046f809e2e1f6fd356aa8980f
- SSDEEP
  
  12288:uMN5gOKX5piYSMPMHoyevdlIk1MqFrLCc/ErTvHWv6TA:uSKX5p75yeDMqFrLB/ErTvZ
Score

10^/10

raccoon cd8dc1031358b1aec55cc6bc447df1018b068607 stealer
- Raccoon
  Raccoon is an infostealer written in C++ and first seen in 2019.
  stealer raccoon
- Raccoon Stealer V1 payload
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

raccooncd8dc1031358b1aec55cc6bc447df1018b068607stealer

behavioral2