General

  • Target
    b3e9f226fa3385d959d9c9c7572e919f.exe
  • Size 1.5MB
  • Sample210308-mcwctx6pex
  • SHA256 d0b4ea79bfa3aad2d6343a52811b837c45229253cda7abb26b4df2107ab52d58
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 0af651a4bbdfb570b08cae586e11f04751033448

Attributes
  • url4cnc

    https://telete.in/jbitchsucks

rc4.plain
rc4.plain

Targets

    • Target
      b3e9f226fa3385d959d9c9c7572e919f.exe
    • Size 1.5MB
    • SHA256 d0b4ea79bfa3aad2d6343a52811b837c45229253cda7abb26b4df2107ab52d58
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks