Resubmissions

31/01/2024, 16:25

240131-twz8dagea610

17/07/2021, 17:28

210717-7yt1fyzgb210

17/07/2021, 17:14

210717-vf2b93akkn10

General

  • Target
    b4b6891aeb21106225c1fb69954f859b
  • Size 495KB
  • Sample210717-vf2b93akkn
  • SHA256 92c79201b019efccd41eaa985d94ad4fcd4989c2023d323f4cdcfe359e3a5433
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      b4b6891aeb21106225c1fb69954f859b
    • Size 495KB
    • SHA256 92c79201b019efccd41eaa985d94ad4fcd4989c2023d323f4cdcfe359e3a5433
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks