Raccoon Stealer infection Malware svchost.exe 217.8.117.89 34.89.22.128

Analysis Information & Articles

This is the latest sample of Raccoon which is an info stealer type malware available as a Malware as a Service. It can be obtained for a subscription and costs $200 per month. Raccoon malware has already infected over 100,000 devices and became one of the most mentioned viruses on the underground forums in 2019. This malware uses base64 encoding for each infected host as you can see below in the packets and here is what it looks like decoded: echo “Ym90X2lkPUQ1MDE3MUYzLUIxRkQtNDFDOS1BRkJGLTNERDJGNzJDOTBCN19yeTR3biZjb25maWdfaWQ9MjE0MWRhOTJiNGFkM2FjODM3ZTAxNjc1Y2UzYTE2ODE4ODUzOTVlMCZkYXRhPW51bGw=” | base64 -d bot_id=D50171F3-B1FD-41C9-AFBF-3DD2F72C90B7_ry4wn&config_id=2141da92b4ad3ac837e01675ce3a1681885395e0&data=null bot_id=D50171F3-B1FD-41C9-AFBF-3DD2F72C90B7_ry4wn&config_id=2141da92b4ad3ac837e01675ce3a1681885395e0&data=null 2020-05-09 02:34:34.532063 IP 192.168.86.25.56399 > 217.8.117.89.80: Flags [P.], seq 1:398, ack 1, win 16425, […]

admin

May 9, 2020

0

Kpot Mikey Malware Sample PCAP File Download Traffic Analysis pollarr.top

Malware PCAP Downloads

What Kryptik virus can do? Executable code extraction Attempts to connect to a dead IP:Port (1 unique times) Creates RWX memory A process attempted to delay the analysis task. Expresses interest in specific running processes HTTP traffic contains suspicious features which may be indicative of malware related traffic Performs some HTTP requests The binary likely contains encrypted or compressed data. Detects Sandboxie through the presence of a library Checks for the presence of known windows from debuggers and forensic tools Attempts to repeatedly call a single API many times in order to delay analysis time Steals private information from local Internet […]

admin

May 9, 2020

0

Jigsaw Ransomware Malware Crimeware PCAP File Download Traffic Sample

Malware

Avast FileRepMetagen [Malware] AVG FileRepMetagen [Malware] Avira (no cloud) Malwarebytes Ransom.Jigsaw McAfee-GW-Edition BehavesLike.Win32.Ransomware.dc Microsoft Trojan:Win32/Occamy.C When executed this ransomware has NO C2 it uses an e-mail address with directions as pictured below: 2020-05-01 16:19:09.841147 IP 192.168.86.1.53 > 192.168.86.25.59527: 12228 1/0/0 A 41.97.11.131 (59)E..W..@.@.if..V…V..5…C.p/…………service-updater.hopto.org…………..;..)a..2020-05-01 16:19:09.841596 IP 192.168.86.25.50977 > 41.97.11.131.80: Flags [S], seq 1891890631, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0E..4f^@…H…V.)a…!.Pp……… ..s…………..2020-05-01 16:19:10.021362 IP 41.97.11.131.80 > 192.168.86.25.50977: Flags [S.], seq 2051894246, ack 1891890632, win 8192, options [mss 1340,nop,wscale 8,nop,nop,sackOK], length 0E..4Q.@.*..p)a….V..P.!zMk.p….. ……..<…….. 2020-05-01 16:19:10.021569 IP 192.168.86.25.50977 > 41.97.11.131.80: Flags [.], ack 1, win 16415, length 0E..(f_@…H…V.)a…!.Pp…zMk.P.@………..2020-05-01 16:19:10.022040 IP 192.168.86.25.50977 > 41.97.11.131.80: […]

admin

May 2, 2020

0

Register / Login

Register
Login
RSS Feed

Recent Posts

Our Cyber Security Networks

ComputerSecurity.org
MalwareTraffic.com
WiFiSecurity.org
SecurityCrawler.com

RSS ComputerSecurity.org Blog

Categories

Tags

5 Tbot TOR Malware Botnet Traffic PCAP File Download Samples Bitcoin Miner Malware Trojan Traffic Sample PCAP File Download Citadel ZeuS Banking Trojan Malware Traffic Sample PCAP File Download CryptoLocker Ransomware Malware Traffic PCAP File Download Exploit Kit PopAds PCAP Traffic File Sample Download Five Blackhole Black Hole Exploit Kit Samples Java PCAP File Downloads FlashPack Flash Pack Exploit Kit Traffic Sample PCAP Download Gameover ZeuS Banking Trojan Malware PCAP File Download High Orbit Ion Cannon HOIC Denial of Service Attack DoS PCAP Download Sample File Horst Proxy Old Malware Sample PCAP File Download Investigation Extraction on RSA Sality Trojan Malware File Sample Download Kelihos Trojan File Downloader Malware Infection PCAP File Download MAC OS iOS OSX Dockster Trojan Malware PCAP File Download Sample Multiple Torpig Mini Loader Malware PCAP File Download Samples Multiple ZeroAccess/Sirefef Malware Infection PCAP file downloads Multiple ZeuS Banking Trojan Malware Phishing PCAP File Downloads Netcat NC NCAT Bind Shell PCAP Example Download Netcat NC NCAT Encrypted SSL Reverse Shell PCAP Example Download Netwire RAT Remote Access Trojan Malware PCAP File Download PassAlert Malware Trojan Downloader PCAP File Download Sample Pony Trojan Downloader Malware PCAP File Download Sample Prosti Screenblaze PUP/Adware with Trojan/Malware Information Stealing Traffic Sample PCAP File Download Redirect Gate to Sweet Orange Exploit Kit PCAP Traffic File Download Reedum Point of Sale Malware Traffic Sample PCAP File Download Sality Malware Trojan PCAP File Download Traffic Samples Self Install PUP 2-vinstaller.com Traffic Sample PCAP File Download Smoke Bot Malware PCAP File Download Sample SpyEye Banking Credentials Stealing Trojan Malware PCAP File Download Traffic Sample Stabuniq DDoS and Banking Trojan Malware PCAP Traffic File Download Sample Taidoor Malware APT PCAP File Download Sample The infamous persistant cookie Evercookie PCAP Download Sample Three Toopu Trojan Downloader Malware PCAP File Download Samples Tinba Trojan Malware Traffic PCAP File Sample Download TinyZBOT Banking Trojan Malware PCAP File Download Sample Trickbot Kovter TrickLoader TrickLoader Malware Trojan PCAP File Download Traffic Sample 91.219.28.77.443 Trojan Download Malware Tijcont PCAP File Download Sample TROJAN WIN TWERKET Short Packet Malware Traffic Sample PCAP File Download Vobfus Malware Trojan PCAP File Download Sample Traffic Wauchos Zbot Malware Trojan PCAP Traffic File Download Sample Web Optimum Adware PUP Malware PCAP File Download Windows Trojan Waski Document PDF Malware PCAP File Download Traffic Sample Wizzcaster Adware Possibly Unwanted Program PUP PCAP Download WordPress Mutopy Symmi W32 Trojan Malware Traffic Sample PCAP File Download Xpaj Malware Trojan Traffic Sample PCAP file download XTremeRAT APT Remote Access Trojan PCAP File Download

Archives