General

  • Target

    13e70695b5e4ef3a5e82db64a293c0b63012d1c6a7e15384ee5e92955cabeb2d

  • Size

    500KB

  • Sample

    211114-y891kaggg4

  • MD5

    7f436cd6c4e218ed2ebfd1183dfe8fac

  • SHA1

    f56ce9c4e1461c8a64f5be769780961d74be5291

  • SHA256

    13e70695b5e4ef3a5e82db64a293c0b63012d1c6a7e15384ee5e92955cabeb2d

  • SHA512

    74b79aba927bb38c7eefc71ffbe83880df8f32402956a6762f418ecaded5f069b8e041d71d1bb8fd8a70ee382df37e6dba148979c589b1627d7bf3aa70e017a2

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

675718a5f2ce6d3cacf6cb04a512f5637eae995f

Attributes
  • url4cnc

    http://91.219.236.27/agrybirdsgamerept

    http://5.181.156.92/agrybirdsgamerept

    http://91.219.236.207/agrybirdsgamerept

    http://185.225.19.18/agrybirdsgamerept

    http://91.219.237.227/agrybirdsgamerept

    http://185.163.47.176/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      13e70695b5e4ef3a5e82db64a293c0b63012d1c6a7e15384ee5e92955cabeb2d

    • Size

      500KB

    • MD5

      7f436cd6c4e218ed2ebfd1183dfe8fac

    • SHA1

      f56ce9c4e1461c8a64f5be769780961d74be5291

    • SHA256

      13e70695b5e4ef3a5e82db64a293c0b63012d1c6a7e15384ee5e92955cabeb2d

    • SHA512

      74b79aba927bb38c7eefc71ffbe83880df8f32402956a6762f418ecaded5f069b8e041d71d1bb8fd8a70ee382df37e6dba148979c589b1627d7bf3aa70e017a2

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks