General

  • Target
    498464e09964f85678853264f5c265b5.exe
  • Size 578KB
  • Sample210313-9rtctnetw6
  • SHA256 6285cfd7bfe0a8dfee88ba7f54b658c2f9b677e61d010396355c5ef5781e047d
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • ddcbd6366de67d1cf1d10203593a074aab7abd55

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      498464e09964f85678853264f5c265b5.exe
    • Size 578KB
    • SHA256 6285cfd7bfe0a8dfee88ba7f54b658c2f9b677e61d010396355c5ef5781e047d
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Suspicious use of NtCreateProcessExOtherParentProcess

MITRE ATT&CK Enterprise v6

Tasks