General

  • Target
    04d100e41d3293bf444651a39dc4e7e9
  • Size 515KB
  • Sample211207-ymjlgsffb2
  • SHA256 a0877c88f33ff8f10eb996d99bfecfc8fce5ab4d78d9e86574c63d13a275cfd6
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.3-hotfix

Botnet
  • fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target
      04d100e41d3293bf444651a39dc4e7e9
    • Size 515KB
    • SHA256 a0877c88f33ff8f10eb996d99bfecfc8fce5ab4d78d9e86574c63d13a275cfd6
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks