General

  • Target

    2f30b23b72722f0b7af7ba50644f1446f3143a09282acbe31ee170487d758378

  • Size

    389KB

  • Sample

    220512-n6hs7agddr

  • MD5

    4b0b1948b1363ebbc213fbfa5d2a16b8

  • SHA1

    f5893410b18a390125db63e53b6b75340e605881

  • SHA256

    2f30b23b72722f0b7af7ba50644f1446f3143a09282acbe31ee170487d758378

  • SHA512

    835753346a9f9b4bb55dad4d80f04ac3431299603d62a4ba2e45375f262b3d85efd52542593085e92adc304e39f7be3dd7950fe3a8caebd24dc3011c4ef5defb

Malware Config

Extracted

Family

raccoon

Botnet

42069a99036f7acbe85c9bc67fe3207cd01fb3fc

Attributes
url4cnc
https://telete.in/jagressor_kz
rc4.plain
rc4.plain

Targets

    • Target

      2f30b23b72722f0b7af7ba50644f1446f3143a09282acbe31ee170487d758378

    • Size

      389KB

    • MD5

      4b0b1948b1363ebbc213fbfa5d2a16b8

    • SHA1

      f5893410b18a390125db63e53b6b75340e605881

    • SHA256

      2f30b23b72722f0b7af7ba50644f1446f3143a09282acbe31ee170487d758378

    • SHA512

      835753346a9f9b4bb55dad4d80f04ac3431299603d62a4ba2e45375f262b3d85efd52542593085e92adc304e39f7be3dd7950fe3a8caebd24dc3011c4ef5defb

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Raccoon Stealer Payload

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks