General

  • Target
    11d684cd5cd5e103aa937dd1688d6ed5.exe
  • Size 571KB
  • Sample211207-ys91maffe9
  • SHA256 4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.3-hotfix

Botnet
  • fd4f23250443a724a3d1548e6ab07c481dfc2814

Attributes
  • url4cnc

    http://91.219.236.27/duglassa1

    http://94.158.245.167/duglassa1

    http://185.163.204.216/duglassa1

    http://185.225.19.238/duglassa1

    http://185.163.204.218/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target
      11d684cd5cd5e103aa937dd1688d6ed5.exe
    • Size 571KB
    • SHA256 4d6db76398fa37523b40e69ac3ae9dea6d04c3c51cce4c0a72e5d312d14e5017
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks