Overview

overview

10

Static

static

3

2-3-1_2023...35.exe

windows7-x64

10

2-3-1_2023...35.exe

windows10-1703-x64

10

2-3-1_2023...35.exe

windows10-2004-x64

10

2-3-1_2023...35.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2-3-1_2023-12-14_13-35.exe

  • Size

    273KB

  • Sample

    240327-122fysce82

  • MD5

    95f70460434d32448cfb8e78e77edb14

  • SHA1

    e30bdda770c6f13a370f4858299b064b9dc58fac

  • SHA256

    28a08faeade7234ec9b0e78b780c1787137581641c57ef6e8088d314b447751a

  • SHA512

    1a79967e02dfe717a2c212b303b0d1fae66483b94488a9784f664ba97bf32d3748283098809d1cae5e6cfc319156cd3ccb9db6222492cdbe21a0c352e5e97c62

  • SSDEEP

    3072:yRxm2/NDzdE3AlymGqo8bMufXYcNEFyxWvdOD5oF1KDsBTgn:yRxd/NDzmMymFBbMuDeFyxSpPUsBT

Score
10/10
raccoonafed87781b48070c555e77a16d871208stealer

Malware Config

Extracted

Family

raccoon

Botnet

afed87781b48070c555e77a16d871208

C2

http://185.16.39.253:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      2-3-1_2023-12-14_13-35.exe

    • Size

      273KB

    • MD5

      95f70460434d32448cfb8e78e77edb14

    • SHA1

      e30bdda770c6f13a370f4858299b064b9dc58fac

    • SHA256

      28a08faeade7234ec9b0e78b780c1787137581641c57ef6e8088d314b447751a

    • SHA512

      1a79967e02dfe717a2c212b303b0d1fae66483b94488a9784f664ba97bf32d3748283098809d1cae5e6cfc319156cd3ccb9db6222492cdbe21a0c352e5e97c62

    • SSDEEP

      3072:yRxm2/NDzdE3AlymGqo8bMufXYcNEFyxWvdOD5oF1KDsBTgn:yRxd/NDzmMymFBbMuDeFyxSpPUsBT

    Score
    10/10
    raccoonafed87781b48070c555e77a16d871208stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks