General

  • Target

    3f522d714dc657fcbab9f40a5be022e778d4143b92f379368fdedd5771e2608f

  • Size

    450KB

  • Sample

    211119-2qlf2aehc8

  • MD5

    13509498b76436a0cc1fe062306d745a

  • SHA1

    d7f2a7c4eaaae0d933912840b1f4ee38ca2b3a08

  • SHA256

    3f522d714dc657fcbab9f40a5be022e778d4143b92f379368fdedd5771e2608f

  • SHA512

    a64a1b63d128b19667c228a7aec94979e0b75637d2f5ebe3c863b8b191e16e5dace76a1a9f97ccbb75e7b628c342f67a8e103dbbe066a0c012b55a3daafcb8ba

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

59885c564847bf29ddd9457b81c619998245ba90

Attributes
  • url4cnc

    http://91.219.236.27/opussenseus1

    http://5.181.156.92/opussenseus1

    http://91.219.236.207/opussenseus1

    http://185.225.19.18/opussenseus1

    http://91.219.237.227/opussenseus1

    https://t.me/opussenseus1

rc4.plain
rc4.plain

Targets

    • Target

      3f522d714dc657fcbab9f40a5be022e778d4143b92f379368fdedd5771e2608f

    • Size

      450KB

    • MD5

      13509498b76436a0cc1fe062306d745a

    • SHA1

      d7f2a7c4eaaae0d933912840b1f4ee38ca2b3a08

    • SHA256

      3f522d714dc657fcbab9f40a5be022e778d4143b92f379368fdedd5771e2608f

    • SHA512

      a64a1b63d128b19667c228a7aec94979e0b75637d2f5ebe3c863b8b191e16e5dace76a1a9f97ccbb75e7b628c342f67a8e103dbbe066a0c012b55a3daafcb8ba

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks