Overview

overview

10

Static

static

3

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    89KB

  • Sample

    240412-v6zj9scd34

  • MD5

    5f670b0585da1ea77525a49c669a7e5c

  • SHA1

    7f43665d61a654fb36274c3019f650c74f8ad316

  • SHA256

    a67e0fd85783e525a3bf49de0daa241f4d7dca55b04164a2bbb71acfdcb94176

  • SHA512

    0e8a43930b0fed4a36a9098b7c53bb50a6020105c9c9e2b9ef1ea6117537b487a4ea435bf34521a538bc62f390d3782fbc3a42a732cc1e674a5bd90371660f41

  • SSDEEP

    1536:J7Mj9V+6CfcSFzuX40XVfoenKY3iPCtbkMM2UhKikUGgb6Auf:e3JCfHo4iVfXKuiatbhM2UhKiygb56

Score
10/10
raccoon8401e21bbb0060afb24ce21fda90f5cbstealer

Malware Config

Extracted

Family

raccoon

Botnet

8401e21bbb0060afb24ce21fda90f5cb

C2

http://195.20.16.155:80

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      tmp

    • Size

      89KB

    • MD5

      5f670b0585da1ea77525a49c669a7e5c

    • SHA1

      7f43665d61a654fb36274c3019f650c74f8ad316

    • SHA256

      a67e0fd85783e525a3bf49de0daa241f4d7dca55b04164a2bbb71acfdcb94176

    • SHA512

      0e8a43930b0fed4a36a9098b7c53bb50a6020105c9c9e2b9ef1ea6117537b487a4ea435bf34521a538bc62f390d3782fbc3a42a732cc1e674a5bd90371660f41

    • SSDEEP

      1536:J7Mj9V+6CfcSFzuX40XVfoenKY3iPCtbkMM2UhKikUGgb6Auf:e3JCfHo4iVfXKuiatbhM2UhKiygb56

    Score
    10/10
    raccoon8401e21bbb0060afb24ce21fda90f5cbstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks