Overview

overview

10

Static

static

3

55c01c3e35...5a.exe

windows7-x64

10

55c01c3e35...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c

  • Size

    403KB

  • Sample

    240831-j4zxgatfpr

  • MD5

    dad0a1223e26a6c79d1b5dbd783794c2

  • SHA1

    ff96633d901f2075b7cc6ea42c7004418180c5cb

  • SHA256

    6e3d9e1503309cab4f0ef335a55264eb04dec4455cfa5b778ccfc0dfd50ed06c

  • SHA512

    27b3e43ae2f5aa1bce9e939f2943221c30121888a37fb4cb08375c54f4c3c874ed16afd65a2c17bd7dbb9ed5af546d511f620db321efe2a2ef5b737c299aadd7

  • SSDEEP

    12288:AVzrqMm8kW9KHXFJa/FTx0X3xi0U2nPfkP1Q:8QJW9Kfa/FVcUIPK1Q

Score
10/10
raccoon8c69c4053271058a3682c21034b535473162bdfbdiscoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

8c69c4053271058a3682c21034b535473162bdfb

Attributes
  • url4cnc

    http://telegatt.top/hiioBlacklight1

    http://telegka.top/hiioBlacklight1

    http://telegin.top/hiioBlacklight1

    https://t.me/hiioBlacklight1

rc4.plain
rc4.plain

Targets

    • Target

      55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a

    • Size

      582KB

    • MD5

      ab9e5ea06c7a9b6d7aef25faecc2e201

    • SHA1

      d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2

    • SHA256

      55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a

    • SHA512

      6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083

    • SSDEEP

      12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK

    Score
    10/10
    raccoon8c69c4053271058a3682c21034b535473162bdfbdiscoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks