Overview

overview

10

Static

static

3

2026-09-21...ee.exe

windows10-2004-x64

10

2026-09-21...ee.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-21_d38f72f91b415e8ee3f88052b82233b3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
  • Size 476KB
  • Sample260922-lxflcsvx5l
  • SHA256 d65b11b26599c30b502424c096e78eaaf7556a7623451993e941a9d31e019b19
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
raccoon2189c5f17d25883af847061b1a1ac5c6eaa79874discoverystealer

Malware Config

Extracted

Family

  • raccoon

Version

  • 1.8.3-hotfix

Botnet

  • 2189c5f17d25883af847061b1a1ac5c6eaa79874

Attributes
  • url4cnc

    http://91.219.236.162/roswestnewros

    http://185.163.47.176/roswestnewros

    http://193.38.54.238/roswestnewros

    http://74.119.192.122/roswestnewros

    http://91.219.236.240/roswestnewros

    https://t.me/roswestnewros

rc4.plain
rc4.plain

Targets

    • Target
      2026-09-21_d38f72f91b415e8ee3f88052b82233b3_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee
    • Size 476KB
    • SHA256 d65b11b26599c30b502424c096e78eaaf7556a7623451993e941a9d31e019b19
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    2189c5f17d25883af847061b1a1ac5c6eaa79874discoveryraccoonstealer

    • Family: Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Detects executables referencing many email and collaboration clients. Observed in information steale

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks