Resubmissions

02/02/2024, 16:51

240202-vc4bcschhn10

02/02/2024, 04:36

240202-e8nb1sgbdq10

General

  • Target
    e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
  • Size 13.1MB
  • Sample240202-vc4bcschhn
  • SHA256 e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • raccoon

Botnet
  • f566f62bc780e31e03848452561e1d60

C2
  • http://94.142.138.85/

Attributes
  • user_agent

    901785252112

xor.plain

Targets

    • Target
      e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
    • Size 13.1MB
    • SHA256 e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
    • MD5 SHA1 SHA512 SSDEEP
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks