Overview

overview

10

Static

static

b5c9ff926c...ea.exe

windows7_x64

10

b5c9ff926c...ea.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b5c9ff926c9f4a9aeb8db3456a2265ea.exe
  • Size 409KB
  • Sample211208-de2f4shfd6
  • SHA256 7eb4f7f0ebf9c5e63154e8866f3f7591eb52c132e6d4c62b55ebe2c492f541cc
  • MD5 SHA1 SHA512
Score
10/10
raccoonfd4f23250443a724a3d1548e6ab07c481dfc2814stealer

Malware Config

Extracted

Family

  • raccoon

Version

  • 1.8.3-hotfix

Botnet

  • fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target
      b5c9ff926c9f4a9aeb8db3456a2265ea.exe
    • Size 409KB
    • SHA256 7eb4f7f0ebf9c5e63154e8866f3f7591eb52c132e6d4c62b55ebe2c492f541cc
    • MD5 SHA1 SHA512
    Score
    10/10
    raccoonfd4f23250443a724a3d1548e6ab07c481dfc2814stealer

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

      stealerraccoon

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks