raccoon | 0b43db960033fdbe66689cf37ae2bc4aa05f571890a84c09a7f2b174f3054554

General

Target
0c6c8ee1ec884f1ccbd4c60c6125cc93.exe
Size 61KB
Sample221005-jptrxadfe9
SHA256 0b43db960033fdbe66689cf37ae2bc4aa05f571890a84c09a7f2b174f3054554
MD5 0c6c8ee1ec884f1ccbd4c60c6125cc93
SHA1 b242d55e9d6abde82a8985235643ac68bb229b12
SHA512 3732dd5b50e5cd439fbb488550e30edf22d907351a2b24229e7a01b8acb6acabf20130c8ccdaf0c102b53623ff6508e5bcb32324ad0bfdd8528584dd2b7a8c92
SSDEEP 768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6RcUhSC:AdMzAzjavO9uG+NNdQ4MGQRXv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

raccoon

Botnet

b3a9997fe55d847cdbadca75fb6e544a

C2

http://185.253.96.120/

rc4.plain

Targets

- Target
  0c6c8ee1ec884f1ccbd4c60c6125cc93.exe
- Size 61KB
- SHA256 0b43db960033fdbe66689cf37ae2bc4aa05f571890a84c09a7f2b174f3054554
- MD5 0c6c8ee1ec884f1ccbd4c60c6125cc93
- SHA1 b242d55e9d6abde82a8985235643ac68bb229b12
- SHA512 3732dd5b50e5cd439fbb488550e30edf22d907351a2b24229e7a01b8acb6acabf20130c8ccdaf0c102b53623ff6508e5bcb32324ad0bfdd8528584dd2b7a8c92
- SSDEEP 768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6RcUhSC:AdMzAzjavO9uG+NNdQ4MGQRXv
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery spyware stealer
- Downloads MZ/PE file
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2

T1081

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Data from Local System

2

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Downloads MZ/PE file

Loads dropped DLL

Reads user/profile data of web browsers

Accesses cryptocurrency files/wallets, possible credential harvesting

Checks installed software on the system

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2