2021-05-21 (FRIDAY) - RACCOON STEALER

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-05-21-raccoon-stealer-IOCs.txt.zip   1.0 kB   (1,036 bytes)
• 2021-05-21-raccoon-stealer-malspam-0324-UTC.eml.zip   4.2 kB   (4,239 bytes)
• 2021-05-21-raccoon-stealer-malware-and-artifacts.zip   1.2 MB   (1,244,066 bytes)
• 2021-05-21-raccoon-stealer-traffic.pcap.zip   7.3 MB   (7,282,419 bytes)

 

IMAGES

Shown above:  Traffic from the infection filtered in Wireshark.

 

Shown above:  Some artifacts seen during the infection.

 

Shown above:  Windows registry created during the infection.

 

Shown above:  Scheduled task created during the infection.

 

Click here to return to the main page.