General

  • Target
    23e3ab4aa0841cf162fb7b324aa458ce04d47c325fe5c.exe
  • Size 553KB
  • Sample211205-hmqf2aegh8
  • SHA256 23e3ab4aa0841cf162fb7b324aa458ce04d47c325fe5ca47ccd3abc77ccbd86b
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.3-hotfix

Botnet
  • a1fcef6b211f7efaa652483b438c193569359f50

Attributes
  • url4cnc

    http://94.158.245.137/duglassa1

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target
      23e3ab4aa0841cf162fb7b324aa458ce04d47c325fe5c.exe
    • Size 553KB
    • SHA256 23e3ab4aa0841cf162fb7b324aa458ce04d47c325fe5ca47ccd3abc77ccbd86b
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks