Overview

overview

10

Static

static

07dd2cc418...24.exe

windows7_x64

10

07dd2cc418...24.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    07dd2cc418847864ac674a4090105c24.exe
  • Size 582KB
  • Sample211017-lbb12sdchp
  • SHA256 97dbb2b9d161dd2b5f26eb48acef6ef70701b75a75b2d281e3dbb7fd946de319
  • MD5 SHA1 SHA512
Score
10/10
raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      07dd2cc418847864ac674a4090105c24.exe
    • Size 582KB
    • SHA256 97dbb2b9d161dd2b5f26eb48acef6ef70701b75a75b2d281e3dbb7fd946de319
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoon723d14b565e8f39294f31f86b0ce56cdaee75105stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks