Raccoon Stealer

Malware & Tools · Raccoon Stealer

· MalwareS1148 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Raccoon Stealer is an information stealer malware family active since at least 2019 as a malware-as-a-service offering sold in underground forums. Raccoon Stealer has experienced two periods of activity across two variants, from 2019 to March 2022, then resurfacing in a revised version in June 2022.(Citation: S2W Racoon 2022)(Citation: Sekoia Raccoon1 2022)

Tactic Coverage

discovery (8)collection (5)stealth (4)exfiltration (2)command and control (2)credential access (2)initial access (1)

Used By (1 groups)

G1015Scattered SpiderRoasted 0ktapus, Octo Tempest

Techniques (24)

T1005Data from Local System

collection

T1012Query Registry

discovery

T1020Automated Exfiltration

exfiltration

T1027.007Dynamic API Resolution

stealth

T1027.013Encrypted/Encoded File

stealth

T1033System Owner/User Discovery

discovery

T1041Exfiltration Over C2 Channel

References

https://attack.mitre.org/software/S1148 https://blog.sekoia.io/raccoon-stealer-v2-part-1-the-return-of-the-dead/https://medium.com/s2wblog/raccoon-stealer-is-back-with-a-new-version-5f436e04b20d