Overview

overview

10

Static

static

7

3898534fa6...d4.exe

windows7-x64

7

3898534fa6...d4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f7f6eb480fe715733e509d0489171c18.bin
  • Size 1.0MB
  • Sample240708-evd67atgph
  • SHA256 06b0a54387089837ec942b7b26d9b6e6644e793ec8ee1600674951b3e9e8ce64
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoon23b7de51bb42a569733f1e26dbce63bastealerupx

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 23b7de51bb42a569733f1e26dbce63ba

C2

  • http://95.169.205.186:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target
      3898534fa62f5a8f169c66900f183e5637e7c4f9be8c46591568ff489bc432d4.exe
    • Size 1.0MB
    • SHA256 3898534fa62f5a8f169c66900f183e5637e7c4f9be8c46591568ff489bc432d4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    upxraccoon23b7de51bb42a569733f1e26dbce63bastealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks