Overview

overview

10

Static

static

1

15a9a36ff6...cs.exe

windows7-x64

10

15a9a36ff6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15a9a36ff6344769a0d3a8bcb63df228bac4776304e29b776fb6896ba60e1124_NeikiAnalytics

  • Size

    560KB

  • Sample

    240521-htjxtscd2x

  • MD5

    de5a8adde8edd682e39c6802e2b98df0

  • SHA1

    b9dca65384f9de2bcaf0f86affe331adf246040f

  • SHA256

    15a9a36ff6344769a0d3a8bcb63df228bac4776304e29b776fb6896ba60e1124

  • SHA512

    684537bbb3758b7cd580d9132a2a507a20390b4db58f13e12d45906cab56bed179212b8de9d3d6a35af9bc5834306418bbedb3ca28e6f52ecf5deb1f6573d2cd

  • SSDEEP

    12288:laXfDEFs0me4gja6X80ZaL5GJRhhoQVKX0IvIh:crGmPexRhoQsX08Ih

Score
10/10
raccoonbe6dd73e116445cabcf5ea5a8355324fa19eade6stealer

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

be6dd73e116445cabcf5ea5a8355324fa19eade6

Attributes
  • url4cnc

    https://tttttt.me/secuhaski4

rc4.plain
rc4.plain

Targets

    • Target

      15a9a36ff6344769a0d3a8bcb63df228bac4776304e29b776fb6896ba60e1124_NeikiAnalytics

    • Size

      560KB

    • MD5

      de5a8adde8edd682e39c6802e2b98df0

    • SHA1

      b9dca65384f9de2bcaf0f86affe331adf246040f

    • SHA256

      15a9a36ff6344769a0d3a8bcb63df228bac4776304e29b776fb6896ba60e1124

    • SHA512

      684537bbb3758b7cd580d9132a2a507a20390b4db58f13e12d45906cab56bed179212b8de9d3d6a35af9bc5834306418bbedb3ca28e6f52ecf5deb1f6573d2cd

    • SSDEEP

      12288:laXfDEFs0me4gja6X80ZaL5GJRhhoQVKX0IvIh:crGmPexRhoQsX08Ih

    Score
    10/10
    raccoonbe6dd73e116445cabcf5ea5a8355324fa19eade6stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks