Raccoon Stealer
Common Information
| Type | Value |
|---|---|
| UUID | 88a78d52-8507-4d59-9c95-20290ee7b550 |
| Fingerprint | 16c205f577b760b69c0a315812049de776acd5821fc59005d1bc872d648a4e1e |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | May 10, 2023, 12:06 p.m. |
| Added to db | Oct. 18, 2024, 5:03 p.m. |
| Last updated | Oct. 18, 2024, 5:07 p.m. |
| Headline | Raccoon Stealer |
| Title | Raccoon Stealer |
| Detected Hints/Tags/Attributes | 135/4/95 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 42 | quorumcyber.com |
|
| Details | Domain | 19 | pcmag.com |
|
| Details | Domain | 2 | socinvestigation.com |
|
| Details | Domain | 39 | ic3.gov |
|
| Details | Domain | 53 | ncsc.gov.uk |
|
| Details | Domain | 2 | pgf5ga4g4b.cn |
|
| Details | Domain | 2 | adogeevent.com |
|
| Details | Domain | 2 | asfggagsa3.xyz |
|
| Details | Domain | 2 | luxury-limousine.com |
|
| Details | Domain | 2 | novacation.cn |
|
| Details | Domain | 2 | sagbbrrww2.cn |
|
| Details | Domain | 2 | skambio-porte.com |
|
| Details | Domain | 3 | post-make.com |
|
| Details | Domain | 78 | bitbucket.org |
|
| Details | Domain | 28 | dl.dropboxusercontent.com |
|
| Details | Domain | 1 | fevruv.com |
|
| Details | Domain | 1 | close-ffe.com |
|
| Details | Domain | 1 | file-toseend.com |
|
| Details | Domain | 3 | gene.win |
|
| Details | Domain | 9 | ke-la.com |
|
| Details | Domain | 88 | securityintelligence.com |
|
| Details | File | 72 | regsvcs.exe |
|
| Details | sha256 | 1 | a7b25c3995f6bc79c2075efbb0bbdbcc0a3cc7fccb920b6c760981cd866ed89a |
|
| Details | sha256 | 1 | 0a97a2e908bf80d2259014727b5552ba82a145984cbf2d15d659fc95990b0a8c |
|
| Details | sha256 | 1 | 11340b2ce797bc2e816c80de5c81a7e97a2c49cd737497e04ffa634b28dff91d |
|
| Details | sha256 | 1 | 4eb1f72cd4836ffb4ba1982739b6c51608243893a077effe9d010339d80a15c3 |
|
| Details | sha256 | 1 | 5404387f44ed0c822de218656745eb70455f7a8826ca0fef70c3f4df3c739f1e |
|
| Details | sha256 | 1 | ab01e44bb60f1ee4ca7359084479125dc356966e12222c3cc408af55f630f930 |
|
| Details | sha256 | 1 | acc51942016fa14566b6b88d8a19fa37dfd96ba5507190a67b318017739de2a3 |
|
| Details | sha256 | 1 | d341f7290aac5263839df2821ba9a4a8691dda52386d1874c30782a8aa20b4d7 |
|
| Details | sha256 | 1 | dff0b944493bf18723367a1125bf0017a87a4a8a7b54bc55ab89b9aa58fa3200 |
|
| Details | sha256 | 1 | e0ac3018ac3327e7d7e5d43d9b8b1e30003c31576cb804c49238339e890ab294 |
|
| Details | sha256 | 1 | e1c20fd6a261d4bc0efc245bc40346b58160022a179813ff294cfb42daefedc2 |
|
| Details | sha256 | 1 | e356e2aeab59814110ed306feab73184954d3f0e26a10ab1754ea572d6adbdcb |
|
| Details | sha256 | 1 | f8a03935fababe6260de74a71e71b8ac92a23969aeb433f8058ee65a49deca67 |
|
| Details | sha256 | 1 | 107953c29a193e80e0744f807acbfad8f4cf533ad811f4bf810b8cd1d58eed32 |
|
| Details | sha256 | 1 | 14a889b18ae5a7264923f81a450796ecd418bbd9ef0a21bd4b9cc468690d4264 |
|
| Details | sha256 | 1 | 32eb91bc7933a1e99fb1416e60523ecfde0811e5cdeb74b7877f457bf6dfea3e |
|
| Details | sha256 | 1 | 4720bb74fb59d088232fe8562ea606587b4ae627b4f79e000beacbea3b2a5fbe |
|
| Details | sha256 | 1 | 47f6d3a11ffd015413ffb96432ec1f980fba5dd084990dd61a00342c5f6da7f8 |
|
| Details | sha256 | 1 | 48849ac3f0808c310277130b423baa51452720f83e03ad534cd7aee359339c7b |
|
| Details | sha256 | 1 | 5a1181c156e5a4d59ae2cc9ead5e1a610b384bdde50df9cde87e331e404629ab |
|
| Details | IPv4 | 1 | 185.181.10.208 |
|
| Details | IPv4 | 1 | 37.49.230.54 |
|
| Details | IPv4 | 1 | 45.143.223.133 |
|
| Details | IPv4 | 1 | 79.137.206.158 |
|
| Details | IPv4 | 1 | 83.217.11.13 |
|
| Details | IPv4 | 1 | 83.217.11.14 |
|
| Details | IPv4 | 1 | 217.138.215.83 |
|
| Details | IPv4 | 1 | 83.217.11.38 |
|
| Details | IPv4 | 1 | 134.209.88.114 |
|
| Details | IPv4 | 1 | 217.196.96.11 |
|
| Details | IPv4 | 1 | 37.220.87.66 |
|
| Details | IPv4 | 1 | 77.91.78.50 |
|
| Details | IPv4 | 1 | 83.217.11.36 |
|
| Details | IPv4 | 3 | 94.142.138.176 |
|
| Details | IPv4 | 1 | 94.142.138.213 |
|
| Details | IPv4 | 1 | 185.106.94.215 |
|
| Details | IPv4 | 2 | 193.149.176.45 |
|
| Details | IPv4 | 1 | 194.163.177.109 |
|
| Details | IPv4 | 1 | 45.9.74.97 |
|
| Details | IPv4 | 1 | 62.109.29.252 |
|
| Details | IPv4 | 1 | 138.84.39.164 |
|
| Details | IPv4 | 1 | 77.73.134.38 |
|
| Details | IPv4 | 1 | 212.113.119.73 |
|
| Details | MITRE ATT&CK Techniques | 480 | T1053 |
|
| Details | MITRE ATT&CK Techniques | 695 | T1059 |
|
| Details | MITRE ATT&CK Techniques | 460 | T1059.001 |
|
| Details | MITRE ATT&CK Techniques | 80 | T1064 |
|
| Details | MITRE ATT&CK Techniques | 106 | T1204.001 |
|
| Details | MITRE ATT&CK Techniques | 365 | T1204.002 |
|
| Details | MITRE ATT&CK Techniques | 380 | T1547.001 |
|
| Details | MITRE ATT&CK Techniques | 550 | T1112 |
|
| Details | MITRE ATT&CK Techniques | 60 | T1202 |
|
| Details | MITRE ATT&CK Techniques | 265 | T1222 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1552.001 |
|
| Details | MITRE ATT&CK Techniques | 99 | T1539 |
|
| Details | MITRE ATT&CK Techniques | 501 | T1012 |
|
| Details | MITRE ATT&CK Techniques | 433 | T1057 |
|
| Details | MITRE ATT&CK Techniques | 1006 | T1082 |
|
| Details | MITRE ATT&CK Techniques | 188 | T1120 |
|
| Details | MITRE ATT&CK Techniques | 185 | T1518 |
|
| Details | MITRE ATT&CK Techniques | 534 | T1005 |
|
| Details | MITRE ATT&CK Techniques | 89 | T1114 |
|
| Details | MITRE ATT&CK Techniques | 27 | T1185 |
|
| Details | MITRE ATT&CK Techniques | 444 | T1071 |
|
| Details | MITRE ATT&CK Techniques | 442 | T1071.001 |
|
| Details | MITRE ATT&CK Techniques | 149 | T1102 |
|
| Details | MITRE ATT&CK Techniques | 472 | T1486 |
|
| Details | MITRE ATT&CK Techniques | 65 | T1491 |
|
| Details | Url | 1 | http://77.73.134.38/mynewfilechr.exe |
|
| Details | Url | 1 | http://212.113.119.73 |
|
| Details | Url | 1 | https://bitbucket.org/dsaddsaf1234/adobeprojectss/downloads/appsetup.rar |
|
| Details | Url | 1 | https://dl.dropboxusercontent.com/s/wxh88thgzf2yvxi/blessedarena_launcher_1.2.5.zip?dl=1 |
|
| Details | Url | 1 | https://file-toseend.com |