Overview

overview

10

Static

static

4671293CA0...85.exe

windows7-x64

10

4671293CA0...85.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4671293CA0ACEAB6572CB9396BFEF9371D51EC2505885.exe
  • Size 7.0MB
  • Sample220910-red8gadhfj
  • SHA256 4671293ca0aceab6572cb9396bfef9371d51ec2505885b8bf453d693300dafb0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoon1eff9e97053f0f161e716d358811d768stealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 1eff9e97053f0f161e716d358811d768

C2

  • http://62.113.255.110/

  • http://188.215.229.203/

rc4.plain

Targets

    • Target
      4671293CA0ACEAB6572CB9396BFEF9371D51EC2505885.exe
    • Size 7.0MB
    • SHA256 4671293ca0aceab6572cb9396bfef9371d51ec2505885b8bf453d693300dafb0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    raccoon1eff9e97053f0f161e716d358811d768stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks