Overview

overview

10

Static

static

1

Internet D...se.exe

windows11-21h2-x64

10

Resubmissions

21/02/2024, 22:33

240221-2g2fwsgc2s10

21/02/2024, 00:09

240221-afr3aaha9710

16/02/2024, 10:54

240216-mzr8lshf8510

Sharing

Copy URL Twitter E-mail

General

  • Target
    Internet Download Manager License.exe
  • Size 802KB
  • Sample240221-2g2fwsgc2s
  • SHA256 e93c31bd6347a60b99fe45160d1318f36357c268fe950697164e57d5da7af2bd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoonc4568b481c4a7791f7fa306252ab42b8stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • c4568b481c4a7791f7fa306252ab42b8

C2

  • http://195.2.76.141:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target
      Internet Download Manager License.exe
    • Size 802KB
    • SHA256 e93c31bd6347a60b99fe45160d1318f36357c268fe950697164e57d5da7af2bd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    raccoonc4568b481c4a7791f7fa306252ab42b8stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks