General

  • Target
    1548a436e221011b220d431f4d6e093f.exe
  • Size 561KB
  • Sample220311-vlflnaadd5
  • SHA256 2fc3db47fe48b58c950b7bfd18d8b80e7ffa48035fa0be7e096d7b593c64edbc
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • raccoon

Botnet
  • d7ce4d2837ba5349afb5f48e90638edf69cc105c

Attributes
  • url4cnc

    http://185.163.204.81/hkpyagain

    http://194.180.191.33/hkpyagain

    http://174.138.11.98/hkpyagain

    http://194.180.191.44/hkpyagain

    http://91.219.236.120/sheinl

    https://t.me/hkpyagain

rc4.plain
rc4.plain

Targets

    • Target
      1548a436e221011b220d431f4d6e093f.exe
    • Size 561KB
    • SHA256 2fc3db47fe48b58c950b7bfd18d8b80e7ffa48035fa0be7e096d7b593c64edbc
    • MD5 SHA1 SHA512
    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

MITRE ATT&CK Matrix

Tasks