General

  • Target
    f701b85cf702e40602648e6f8fb78960.exe
  • Size 500KB
  • Sample211115-j555waeefj
  • SHA256 b18a90d447d2ac2f612c1640c4fa3ac7fa01b2d814dac1db2eab9d5e7359e0ec
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.3-hotfix

Botnet
  • 8676acc62506c032cd3c072a17a90a5ec07283b3

Attributes
  • url4cnc

    http://91.219.236.27/jdiamond13

    http://5.181.156.92/jdiamond13

    http://91.219.236.207/jdiamond13

    http://185.225.19.18/jdiamond13

    http://91.219.237.227/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target
      f701b85cf702e40602648e6f8fb78960.exe
    • Size 500KB
    • SHA256 b18a90d447d2ac2f612c1640c4fa3ac7fa01b2d814dac1db2eab9d5e7359e0ec
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks