Overview

overview

10

Static

static

299ff43465...5a.exe

windows7_x64

10

299ff43465...5a.exe

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    299ff43465ed213c038adf7cde8c57df986b6267dfbb5599ca6925d1bf95f35a

  • Size

    1.1MB

  • Sample

    201111-svsl5kwnv2

  • MD5

    eaac66f1ed8fc1a960ae866012cf6437

  • SHA1

    d7f91b80a7fd68240320fd69f43853c73878927e

  • SHA256

    299ff43465ed213c038adf7cde8c57df986b6267dfbb5599ca6925d1bf95f35a

  • SHA512

    0d8a0301601e9ba484649a9dddea61b091631820503b8e7069a61122adb09160db909a9361387256552e6a29ad6890571117fa9d48b12fcce7b6cf03bb28bbf9

Score
10/10
raccoonstealer

Malware Config

Targets

    • Target

      299ff43465ed213c038adf7cde8c57df986b6267dfbb5599ca6925d1bf95f35a

    • Size

      1.1MB

    • MD5

      eaac66f1ed8fc1a960ae866012cf6437

    • SHA1

      d7f91b80a7fd68240320fd69f43853c73878927e

    • SHA256

      299ff43465ed213c038adf7cde8c57df986b6267dfbb5599ca6925d1bf95f35a

    • SHA512

      0d8a0301601e9ba484649a9dddea61b091631820503b8e7069a61122adb09160db909a9361387256552e6a29ad6890571117fa9d48b12fcce7b6cf03bb28bbf9

    Score
    10/10
    raccoonstealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks