Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
Raccoon Infostealer Malware Returns with New TTPS – Detection & Response
Malware Families
Excerpt
Raccoon is an info stealer type malware available as malware-as-a-service on underground forums since early 2019. It can be obtained for a subscription and costs $200 per month. Raccoon malware has already infected over 100,000 devices and became one of the most mentioned viruses on the underground forums. Also Read: Latest IOCs – Threat Actor URLs , IP’s & Malware Hashes The Raccoon Malware is a robust stealer that allows the stealing of data such as passwords, cookies,…
Read the original report →Diamond Model
Adversary
Infrastructure(3)
Capability(1)
Victim
Attack Flow8 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 51c33c00a3823180a7b39ab838542d9d | Medium | Score 53/100 | First seen |
| MD5 | c8f9b86af75c8cb9f973683dbee27f93 | Medium | Score 53/100 | First seen |
| MD5 | 704cb6b7d8863165857bca2c33283fa0 | Medium | Score 53/100 | First seen |
| URL | http://88.119.170.241/ | High | Score 58/100 | First seen |
| MD5 | ecc322f22da7cee63fb2ee0bfd5df59c | Medium | Score 53/100 | First seen |
| MD5 | 1de2a5e94f070e9d6e8d70fe63e87175 | Medium | Score 53/100 | First seen |
| URL | http://85.192.63.46/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll | High | Score 58/100 | First seen |
| MD5 | e490eacd7d52073891790cd3411a1221 | Medium | Score 53/100 | First seen |
| MD5 | 2eb2d4dc60b185e1961746b120d45f97 | Medium | Score 53/100 | First seen |
| MD5 | 7a1618c1616dae2aa4402b2f9f0febc7 | Medium | Score 53/100 | First seen |
| MD5 | 52b4394897b2ddd3c47ec410ea1ff869 | Medium | Score 53/100 | First seen |
| URL | http://85.192.63.46/ | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…