General
- Target 2-3-1_2023-12-14_13-35.exe
- Size 273KB
- Sample240327-122fysce82
- SHA256 28a08faeade7234ec9b0e78b780c1787137581641c57ef6e8088d314b447751a
- MD5 95f70460434d32448cfb8e78e77edb14
- SHA1 e30bdda770c6f13a370f4858299b064b9dc58fac
- SHA512 1a79967e02dfe717a2c212b303b0d1fae66483b94488a9784f664ba97bf32d3748283098809d1cae5e6cfc319156cd3ccb9db6222492cdbe21a0c352e5e97c62
- SSDEEP 3072:yRxm2/NDzdE3AlymGqo8bMufXYcNEFyxWvdOD5oF1KDsBTgn:yRxd/NDzmMymFBbMuDeFyxSpPUsBT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2-3-1_2023-12-14_13-35.exe
Resource
win7-20240221-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
2-3-1_2023-12-14_13-35.exe
Resource
win10-20240221-en
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
2-3-1_2023-12-14_13-35.exe
Resource
win10v2004-20240319-en
3 signatures
300 seconds
Behavioral task
behavioral4
Sample
2-3-1_2023-12-14_13-35.exe
Resource
win11-20240221-en
3 signatures
300 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
afed87781b48070c555e77a16d871208
C2
-
http://185.16.39.253:80/
Attributes
-
user_agent
MrBidenNeverKnow
xor.plain
Targets
-
- Target 2-3-1_2023-12-14_13-35.exe
- Size 273KB
- SHA256 28a08faeade7234ec9b0e78b780c1787137581641c57ef6e8088d314b447751a
- MD5 95f70460434d32448cfb8e78e77edb14
- SHA1 e30bdda770c6f13a370f4858299b064b9dc58fac
- SHA512 1a79967e02dfe717a2c212b303b0d1fae66483b94488a9784f664ba97bf32d3748283098809d1cae5e6cfc319156cd3ccb9db6222492cdbe21a0c352e5e97c62
- SSDEEP 3072:yRxm2/NDzdE3AlymGqo8bMufXYcNEFyxWvdOD5oF1KDsBTgn:yRxd/NDzmMymFBbMuDeFyxSpPUsBT
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Raccoon Stealer V2 payload
MITRE ATT&CK Matrix
Tasks
static1
Score
3/10
behavioral1
raccoonafed87781b48070c555e77a16d871208stealer
Score
10/10
behavioral2
raccoonafed87781b48070c555e77a16d871208stealer
Score
10/10
behavioral3
raccoonafed87781b48070c555e77a16d871208stealer
Score
10/10
behavioral4
raccoonafed87781b48070c555e77a16d871208stealer
Score
10/10