General

  • Target

    4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017

  • Size

    571KB

  • Sample

    211207-s9s6jsbaej

  • MD5

    11d684cd5cd5e103aa937dd1688d6ed5

  • SHA1

    11460e16e261a645f860a8b7d0947b66a1a092b6

  • SHA256

    4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017

  • SHA512

    65b43995ac05382e5ab7c3b65036f459f2c0380fd2158943b161d59d2aba5e61f162948a0b869a05f9687daf178762ec7b1f74b451d87fb3259b870a10d32e25

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target

      4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017

    • Size

      571KB

    • MD5

      11d684cd5cd5e103aa937dd1688d6ed5

    • SHA1

      11460e16e261a645f860a8b7d0947b66a1a092b6

    • SHA256

      4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017

    • SHA512

      65b43995ac05382e5ab7c3b65036f459f2c0380fd2158943b161d59d2aba5e61f162948a0b869a05f9687daf178762ec7b1f74b451d87fb3259b870a10d32e25

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks