General

  • Target

    d124281f517809446ca8e6dd703a3c81957639514ebad8e19d560541fee12b25

  • Size

    500KB

  • Sample

    211115-jpc46aheh2

  • MD5

    6b467c99aedbcf71906ef1674c6a38f2

  • SHA1

    e135465e5267c7078b9e10e4d8363e2d301c8187

  • SHA256

    d124281f517809446ca8e6dd703a3c81957639514ebad8e19d560541fee12b25

  • SHA512

    7488f7826eba6d8fe38992a92fca4dde75e49ebae58a2ba1998ece456f5a59fb404c54359af4a81f720ad362a0167bd34e723d11948d8cfd7db1d2ffd5ea3268

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

675718a5f2ce6d3cacf6cb04a512f5637eae995f

Attributes
  • url4cnc

    http://91.219.236.27/agrybirdsgamerept

    http://5.181.156.92/agrybirdsgamerept

    http://91.219.236.207/agrybirdsgamerept

    http://185.225.19.18/agrybirdsgamerept

    http://91.219.237.227/agrybirdsgamerept

    http://185.163.47.176/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      d124281f517809446ca8e6dd703a3c81957639514ebad8e19d560541fee12b25

    • Size

      500KB

    • MD5

      6b467c99aedbcf71906ef1674c6a38f2

    • SHA1

      e135465e5267c7078b9e10e4d8363e2d301c8187

    • SHA256

      d124281f517809446ca8e6dd703a3c81957639514ebad8e19d560541fee12b25

    • SHA512

      7488f7826eba6d8fe38992a92fca4dde75e49ebae58a2ba1998ece456f5a59fb404c54359af4a81f720ad362a0167bd34e723d11948d8cfd7db1d2ffd5ea3268

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks