Overview

overview

10

Static

static

3

8387ad3214...0d.exe

windows7-x64

10

8387ad3214...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    181d1c2e441102f8bed4c0a50420d0ed.zip

  • Size

    450KB

  • Sample

    240901-aalnbatape

  • MD5

    999b4a79a5978b17d746a7fd021e0093

  • SHA1

    2f63158056a3a55484b022845b7a9277668b81b7

  • SHA256

    627f09a238bb37b0282db45d7dee3adfdd9e53b2d53678cde8fbd3eb78c021e7

  • SHA512

    fa1adb74d7d537d63b32b27f6ba014f385cafaeec28e625daacdfa24acda9cccf0cc0c7efea396833f8f78ada95899d213f74dc5b76695d28e52d974fad34039

  • SSDEEP

    12288:3IG36RObkklpyo7fE9EtkkPHww8vJZtBT:3IM6ROrlD7fuEk8HzAZtF

Score
10/10
raccoon206638f4cd9b007905f3516343bb43f7f6b04e5cdiscoverystealer

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

206638f4cd9b007905f3516343bb43f7f6b04e5c

Attributes
  • url4cnc

    http://telemirror.top/upsdronfly3

    http://tgmirror.top/upsdronfly3

    http://telegatt.top/upsdronfly3

    http://telegka.top/upsdronfly3

    http://telegin.top/upsdronfly3

    https://t.me/upsdronfly3

rc4.plain
rc4.plain

Targets

    • Target

      8387ad32144c17a6ed8f986d4841d1caa85c54b41a0da7961bc199642a62380d

    • Size

      540KB

    • MD5

      181d1c2e441102f8bed4c0a50420d0ed

    • SHA1

      0146e0cb44fb072c0b7ca88df2edf97c101b078b

    • SHA256

      8387ad32144c17a6ed8f986d4841d1caa85c54b41a0da7961bc199642a62380d

    • SHA512

      64d5e3cbedd6069d3141defb1cc130c8da7ccba70ff9679e20324667a00b764fbccc0aa29e9cd67b103563a5ce1daf89185ffcc0550163d156bc35df95a8fe4e

    • SSDEEP

      12288:kqNtfxD1cPk0SYbfMRamXMOtmcetnBndJugAwZGEX8cA0/M:kKtGPk0SYbEXetnpdJugFsEv

    Score
    10/10
    raccoon206638f4cd9b007905f3516343bb43f7f6b04e5cdiscoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks