Overview

overview

10

Static

static

3

4abac2b9a8...dc.exe

windows7-x64

10

4abac2b9a8...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ed6ba01ad795934965e6a410684a631.zip

  • Size

    431KB

  • Sample

    240903-xt72zsvhrc

  • MD5

    7249a7041a485ef0a8c0cbe48c0f2cff

  • SHA1

    268b7376ff2abc11de304b80e1c2404613478cc0

  • SHA256

    f91109c6a3a90826f1bcc0de3721d45da9d9bd2c332bc05d0f5e4291a96b4b44

  • SHA512

    ec31223d70cc89d6fceea1355494ba7f4ce8041671ac2c4e41a797a8bfb35743a048ca950f03e1e585c346c54f5bdff343852915351e20dd8042a3fb94274361

  • SSDEEP

    12288:o2JkbBX9onHRNmCx1pN3xKO7K8s/9er+/tqJ9:4BXCRNmCNN3xp73s/LFqJ9

Score
10/10
raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7discoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      4abac2b9a8d77a552f9de8430e84ce05fef7534077a3696e4eb4f358ae14fadc

    • Size

      593KB

    • MD5

      5ed6ba01ad795934965e6a410684a631

    • SHA1

      184626eecc712e727a2488afe873c5b0d6c94612

    • SHA256

      4abac2b9a8d77a552f9de8430e84ce05fef7534077a3696e4eb4f358ae14fadc

    • SHA512

      d02c532aa1d26d0cd81d27e1c8cf48a17be2ee9cefffdfd320a8c7d2397ce4959c8aac9865ce13298633abf4057bdf204f76a6492810f99cc1e7157917a5ba76

    • SSDEEP

      12288:q5EIZy6umDvuiMN98QxI3AXpwqovrjnlM0ko5GHLg:q5EIJjuiS986I3+wrlM0kP

    Score
    10/10
    raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks