Overview

overview

10

Static

static

3

2024-07-08...rd.exe

windows7-x64

1

2024-07-08...rd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-08_884d0797256b7e9717dfda2d014643bb_megazord

  • Size

    2.3MB

  • Sample

    240708-lhgvwavfkd

  • MD5

    884d0797256b7e9717dfda2d014643bb

  • SHA1

    281058d73154a5f82624271a4fd63bf9635f69a5

  • SHA256

    df7e7381461c44754f325efed3c17b8ac9b893b0a76bc35f1922226b03f9d1e7

  • SHA512

    84ad9f24d2018883cdf376564ca9b15e98bcc449f7bccf26f06f6d919aeb52ea1a6a39ead4f8cce2ed3604940e01113a20894a2e8efbe8d6bd71a6d2e112a79f

  • SSDEEP

    24576:wXIZpwW/OE9ctUcXnsKbHf1H2X7O6I1V3uMRBSPJF2nsHbd1UMFKM/Zm4S8zxO8m:CIrwQcG7TI1V3vRBIJF5JKfTg1ZsbI

Score
10/10
raccoon1a5d06870a6b84740b2c11dce573e9a0stealer

Malware Config

Extracted

Family

raccoon

Botnet

1a5d06870a6b84740b2c11dce573e9a0

C2

http://95.169.205.186:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      2024-07-08_884d0797256b7e9717dfda2d014643bb_megazord

    • Size

      2.3MB

    • MD5

      884d0797256b7e9717dfda2d014643bb

    • SHA1

      281058d73154a5f82624271a4fd63bf9635f69a5

    • SHA256

      df7e7381461c44754f325efed3c17b8ac9b893b0a76bc35f1922226b03f9d1e7

    • SHA512

      84ad9f24d2018883cdf376564ca9b15e98bcc449f7bccf26f06f6d919aeb52ea1a6a39ead4f8cce2ed3604940e01113a20894a2e8efbe8d6bd71a6d2e112a79f

    • SSDEEP

      24576:wXIZpwW/OE9ctUcXnsKbHf1H2X7O6I1V3uMRBSPJF2nsHbd1UMFKM/Zm4S8zxO8m:CIrwQcG7TI1V3vRBIJF5JKfTg1ZsbI

    Score
    10/10
    raccoon1a5d06870a6b84740b2c11dce573e9a0stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks