General

  • Target

    1d9871989dcdfb43beb4d9ee6c44d13c60e489c347d8125c87faa3b14d696285

  • Size

    512KB

  • Sample

    211021-v3h34sbdgq

  • MD5

    d09a76976c1487218616dbabd20396e5

  • SHA1

    6aab209f6b204b8d835b817bd35b124de72ddd12

  • SHA256

    1d9871989dcdfb43beb4d9ee6c44d13c60e489c347d8125c87faa3b14d696285

  • SHA512

    5a0fbc0c61a9cd3feb03f424759c1df9a5f63287fceb6322641545baaed8fac5cfd16bcfd7c2d79e09738f92f623687f76b877a7742bdbb2a6926cac3ce2704d

Malware Config

Extracted

Family

raccoon

Botnet

887a0ffaca448362277f2227182491216b734133

Attributes
  • url4cnc

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      1d9871989dcdfb43beb4d9ee6c44d13c60e489c347d8125c87faa3b14d696285

    • Size

      512KB

    • MD5

      d09a76976c1487218616dbabd20396e5

    • SHA1

      6aab209f6b204b8d835b817bd35b124de72ddd12

    • SHA256

      1d9871989dcdfb43beb4d9ee6c44d13c60e489c347d8125c87faa3b14d696285

    • SHA512

      5a0fbc0c61a9cd3feb03f424759c1df9a5f63287fceb6322641545baaed8fac5cfd16bcfd7c2d79e09738f92f623687f76b877a7742bdbb2a6926cac3ce2704d

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Suspicious use of NtCreateProcessExOtherParentProcess

MITRE ATT&CK Matrix

Tasks