Overview

overview

10

Static

static

3

Activator.exe

windows7-x64

10

Activator.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Activator.zip

  • Size

    642KB

  • Sample

    240718-l55v8axbmg

  • MD5

    339e5c26cf89bd44aa5505f81f45073b

  • SHA1

    590753e97ecd42e3368939773509f8ba9856c8c2

  • SHA256

    1949775afeeb2151a482be0d0aee3d4d7a4d6bac1ad35ef30473042483677d7d

  • SHA512

    acf5be638c59b1f6ab2fe89e682f1d131d431561ea9f260e8690daa688b4bfd5b38bd0b32eb34264cacc6b1766f50e21f5f1844f2479a284601cde5bd8040dc6

  • SSDEEP

    3072:JV7Zln97CCS3jgi1nI7lJ8EDZz4N9GhbtjRArbjdG/vgVyBZuLDB46HrP7AgrkWA:P74CqyfXyN90ZarbZGHgVyuLDB5LzAtr

Score
10/10
raccoondd188c0be5001b2c8fb76d74174694cdstealer

Malware Config

Extracted

Family

raccoon

Botnet

dd188c0be5001b2c8fb76d74174694cd

C2

http://147.45.44.25:80/

http://85.28.47.116:80/
Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      Activator.exe

    • Size

      444.9MB

    • MD5

      990c2776648f18807d529dac58b72389

    • SHA1

      866a20d4a4d49a50e09c2ffee39c96f09fd7ee73

    • SHA256

      24283a726bd7eb1f2d0c9dce37f2e05160adf6f4830d6d4a9ecc985ec03df65b

    • SHA512

      daf45dac2b1a78b8bc6a79d1a06c3b8ae2d43a78a4c61d12a9c3b9b0bec60828bd7d1352b6cefb46b6b5cc126a99485a16a0e29b352e5dda9ba747cb3c0383da

    • SSDEEP

      6144:RFPK/bLjYIc9pxyN90vElTvWChzlS41R9d:RFC/f8y90svN/S2R9d

    Score
    10/10
    raccoonstealerdd188c0be5001b2c8fb76d74174694cd

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks