Pulse Detail — Threat Intelligence

PULSE NAME

Raccoon Stealer Announce Return After Hiatus

WHITE AlienVault 2023-08-16 Modified: 2023-09-15

IOCs

HIGH VOLUME

First observed in 2019 and advertised as a ‘Malware-as-a-Service’ (MaaS) threat on various cybercriminal forums, Raccoon is an information stealer targeting victim credentials and cryptocurrency wallets.

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1113 T1566 T1041 T1547

MALWARE FAMILIES

Raccoon

Indicators of Compromise (7 / 56 total)

All URL FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	https://tttttt.me/antitantief3	—	2023-08-16
URL	https://tttttt.me/brikitiki	—	2023-08-16
URL	https://telete.in/baudemars	—	2023-08-16
URL	https://telete.in/bpa1010100102	—	2023-08-16
URL	https://telete.in/jiocacossa	—	2023-08-16
URL	https://tttttt.me/ch0koalpengold	—	2023-08-16
URL	https://tttttt.me/kokajakprozak	—	2023-08-16

References (1)

↗ https://cyberint.com/blog/financial-services/raccoon-stealer/