Overview

overview

10

Static

static

3

2026-09-30...ee.exe

windows10-2004-x64

10

2026-09-30...ee.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-30_99181daec089ef8f2fdafd626a8c92ba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
  • Size 419KB
  • Sample261001-lma8wstdqc
  • SHA256 1e28c1a930287cbed0a286f9966a650234617192d9cf02d8e043d93091db6909
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
raccoonce48fedc83cc4a164bd6f74898597e8c8e875680discoverystealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • ce48fedc83cc4a164bd6f74898597e8c8e875680

Attributes
  • url4cnc

    http://teleliver.top/agrybirdsgamerept

    http://livetelive.top/agrybirdsgamerept

    http://teleger.top/agrybirdsgamerept

    http://telestrong.top/agrybirdsgamerept

    http://tgrampro.top/agrybirdsgamerept

    http://teleghost.top/agrybirdsgamerept

    http://teleroom.top/agrybirdsgamerept

    http://telemir.top/agrybirdsgamerept

    http://teletelo.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target
      2026-09-30_99181daec089ef8f2fdafd626a8c92ba_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
    • Size 419KB
    • SHA256 1e28c1a930287cbed0a286f9966a650234617192d9cf02d8e043d93091db6909
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    ce48fedc83cc4a164bd6f74898597e8c8e875680discoveryraccoonstealer

    • Family: Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Detects executables referencing many email and collaboration clients. Observed in information steale

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks