Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c98d20df81567c0b314ba81bb8deb937eb385eccc352fa61258c58800d53a3d6
  • Size 1.6MB
  • Sample240913-pttkla1cpl
  • SHA256 c98d20df81567c0b314ba81bb8deb937eb385eccc352fa61258c58800d53a3d6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoon4e847b07368a85ebd0a57e614b4bffb9discoverystealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 4e847b07368a85ebd0a57e614b4bffb9

C2

  • https://192.153.57.177:80

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target
      c98d20df81567c0b314ba81bb8deb937eb385eccc352fa61258c58800d53a3d6
    • Size 1.6MB
    • SHA256 c98d20df81567c0b314ba81bb8deb937eb385eccc352fa61258c58800d53a3d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    raccoon4e847b07368a85ebd0a57e614b4bffb9discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks