General

  • Target

    ea1c45c03a1e539f0bddb675416be1f9b3d49b35ab27c2a8d0d27eaff2fc8341

  • Size

    571KB

  • Sample

    211207-vg3wdseee9

  • MD5

    94996679b1127144fa594a7bbace0100

  • SHA1

    ac2f4db2025cb074f462e3ac7bbeadca12784eb2

  • SHA256

    ea1c45c03a1e539f0bddb675416be1f9b3d49b35ab27c2a8d0d27eaff2fc8341

  • SHA512

    cddbced089d6f83cdf101c8b643e206a2b97808af6bb6e1197fc57850c6d0a6328b926db5f29e2d3afb14c628c40a6073df35e61d2ec4295ff42927834963891

Malware Config

Extracted

Family

raccoon

Version

1.8.3-hotfix

Botnet

fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target

      ea1c45c03a1e539f0bddb675416be1f9b3d49b35ab27c2a8d0d27eaff2fc8341

    • Size

      571KB

    • MD5

      94996679b1127144fa594a7bbace0100

    • SHA1

      ac2f4db2025cb074f462e3ac7bbeadca12784eb2

    • SHA256

      ea1c45c03a1e539f0bddb675416be1f9b3d49b35ab27c2a8d0d27eaff2fc8341

    • SHA512

      cddbced089d6f83cdf101c8b643e206a2b97808af6bb6e1197fc57850c6d0a6328b926db5f29e2d3afb14c628c40a6073df35e61d2ec4295ff42927834963891

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks