General

  • Target

    b676331a683dfba0ca8b93839c6400ccb43938ef738c0b7f0e838f08dd8091a9

  • Size

    501KB

  • Sample

    211115-dc9ppshbe8

  • MD5

    24001197df0580d68dedd1fb16ca9a3f

  • SHA1

    1c1107d6cb2c1d30f803754e8c0aba25d16b87fb

  • SHA256

    b676331a683dfba0ca8b93839c6400ccb43938ef738c0b7f0e838f08dd8091a9

  • SHA512

    286fcbc3824d3154a6fcf6990a76992b5170d5298c66b0c797e885b6342a404e5b697a1d53e9e6ec909d43a718e8a61c7525312f67dd67149f0ba5aa2f57739b

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

675718a5f2ce6d3cacf6cb04a512f5637eae995f

Attributes
  • url4cnc

    http://91.219.236.27/agrybirdsgamerept

    http://5.181.156.92/agrybirdsgamerept

    http://91.219.236.207/agrybirdsgamerept

    http://185.225.19.18/agrybirdsgamerept

    http://91.219.237.227/agrybirdsgamerept

    http://185.163.47.176/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      b676331a683dfba0ca8b93839c6400ccb43938ef738c0b7f0e838f08dd8091a9

    • Size

      501KB

    • MD5

      24001197df0580d68dedd1fb16ca9a3f

    • SHA1

      1c1107d6cb2c1d30f803754e8c0aba25d16b87fb

    • SHA256

      b676331a683dfba0ca8b93839c6400ccb43938ef738c0b7f0e838f08dd8091a9

    • SHA512

      286fcbc3824d3154a6fcf6990a76992b5170d5298c66b0c797e885b6342a404e5b697a1d53e9e6ec909d43a718e8a61c7525312f67dd67149f0ba5aa2f57739b

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks