TLP:WHITE12 IOCs

Raccoon Infostealer Malware Returns with New TTPS – Detection & Response

Security Investigation

Published August 18, 2022Original Report

Diamond Model

Adversary

Infrastructure(3)

Capability(1)

Victim

Initial AccessTA0001·T1566

1/8

Phishing

ActionDeliver malware via phishing

Raccoon malware is often delivered through phishing campaigns.

Analysis unavailable

Type	Indicator	Confidence	Score	First Seen
MD5	51c33c00a3823180a7b39ab838542d9d file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	c8f9b86af75c8cb9f973683dbee27f93 file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	704cb6b7d8863165857bca2c33283fa0 file-hashintel-blogmalware	Medium	53	Jun 2, 26
URL	http://88.119.170.241/ intel-blogmalwarenetwork	High	58	Jun 2, 26
MD5	ecc322f22da7cee63fb2ee0bfd5df59c file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	1de2a5e94f070e9d6e8d70fe63e87175 file-hashintel-blogmalware	Medium	53	Jun 2, 26
URL	http://85.192.63.46/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3.dll intel-blogmalwarenetwork	High	58	Jun 2, 26
MD5	e490eacd7d52073891790cd3411a1221 file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	2eb2d4dc60b185e1961746b120d45f97 file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	7a1618c1616dae2aa4402b2f9f0febc7 file-hashintel-blogmalware	Medium	53	Jun 2, 26
MD5	52b4394897b2ddd3c47ec410ea1ff869 file-hashintel-blogmalware	Medium	53	Jun 2, 26
URL	http://85.192.63.46/ intel-blogmalwarenetwork	High	58	Jun 2, 26

IOC Relationship Graph12 total IOCs

MD5URL

scroll to zoom · drag to pan · click IOC to open