Overview

overview

10

Static

static

3

0203ee4a42...cd.exe

windows7-x64

1

0203ee4a42...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0203ee4a4252b78a17796e7e4832dcfb921051b87e4a727eae172ea13d9424cd

  • Size

    6.7MB

  • Sample

    240503-bmgqkadd76

  • MD5

    94bda0c9325b4655f5d422092b7e685f

  • SHA1

    5440a1d577194fb53cef821008853eabf77c4b5a

  • SHA256

    0203ee4a4252b78a17796e7e4832dcfb921051b87e4a727eae172ea13d9424cd

  • SHA512

    5e7bc7414074abec96a43b2bd5d0533491780ccff9303be26bcd3e25c7cb3faf1e05669ccb63c7808f6f7fd69ee90f5d46be770a870bb194b79be5c9b42f3243

  • SSDEEP

    196608:Sp460oG0zsP9fCoHMk79G/acvXVTLSNK:W454zswoZG/VTL

Score
10/10
raccoond6963f7081d7100d9b653c14683abd5estealer

Malware Config

Extracted

Family

raccoon

Botnet

d6963f7081d7100d9b653c14683abd5e

C2

http://185.25.51.5

http://185.25.51.6

http://213.252.244.5
Attributes
  • user_agent

    23591

xor.plain

Targets

    • Target

      0203ee4a4252b78a17796e7e4832dcfb921051b87e4a727eae172ea13d9424cd

    • Size

      6.7MB

    • MD5

      94bda0c9325b4655f5d422092b7e685f

    • SHA1

      5440a1d577194fb53cef821008853eabf77c4b5a

    • SHA256

      0203ee4a4252b78a17796e7e4832dcfb921051b87e4a727eae172ea13d9424cd

    • SHA512

      5e7bc7414074abec96a43b2bd5d0533491780ccff9303be26bcd3e25c7cb3faf1e05669ccb63c7808f6f7fd69ee90f5d46be770a870bb194b79be5c9b42f3243

    • SSDEEP

      196608:Sp460oG0zsP9fCoHMk79G/acvXVTLSNK:W454zswoZG/VTL

    Score
    10/10
    raccoond6963f7081d7100d9b653c14683abd5estealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks