General

  • Target
    2A3B5D211C1926990B33553CA2D9F490167D4A0A73E96.exe
  • Size 584KB
  • Sample220208-2h875agbal
  • SHA256 2a3b5d211c1926990b33553ca2d9f490167d4a0a73e96da9de8f79fdb814d66c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 8e62c411d0d1e4d6cd2e8916c2a8dbde4b6dd23f

Attributes
  • url4cnc

    http://178.62.127.193/duglassa1

    http://5.181.156.155/duglassa1

    http://185.163.45.70/duglassa1

    http://185.163.204.22/duglassa1

    http://178.62.113.205/duglassa1

    https://t.me/duglassa1

rc4.plain
rc4.plain

Targets

    • Target
      2A3B5D211C1926990B33553CA2D9F490167D4A0A73E96.exe
    • Size 584KB
    • SHA256 2a3b5d211c1926990b33553ca2d9f490167d4a0a73e96da9de8f79fdb814d66c
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • suricata: ET MALWARE Win32.Raccoon Stealer Checkin M6

      suricata: ET MALWARE Win32.Raccoon Stealer Checkin M6

MITRE ATT&CK Enterprise v6

Tasks