e9f10c8c32952054ffb16dc8dc128c724a8a94d6368b572eb590be9e301933bc

General
Target

e9f10c8c32952054ffb16dc8dc128c724a8a94d6368b572eb590be9e301933bc

Size

385KB

Sample

220520-rx4ababefp

Score
10 /10
MD5

99dff7f8c3247349fe8bdc86543946b2

SHA1

dfc8a387ebb6ca2f47960e9518ef24c459cf8133

SHA256

e9f10c8c32952054ffb16dc8dc128c724a8a94d6368b572eb590be9e301933bc

SHA512

ec225599fb18be8164f57d41e13375509db6a213a85b8fd2bf0c23f2f9b3fc86f3e289ec14cdf62b28fb35ae2fb3525a44a7968989c469e6d64c2aa001a1e1d0

Malware Config

Extracted

Family raccoon
Botnet e29019d302d3c4858d02133aa50d6f91fdba32ce
Attributes
url4cnc
https://telete.in/h_dmartens_1
rc4.plain
rc4.plain
Targets
Target

Payment_copyUSD_pdf.exe

MD5

63318f287f84a300750a2236901f357e

Filesize

443KB

Score
10/10
SHA1

bc98b692a27350b81694288783b17647739917d9

SHA256

13b574bdacbd66335eb90d98e9be0e0bbd36373658a41c691d25b1d39c3621e4

SHA512

f993591ddec78cd4da277e44333fcf5a8b24c13123c81bbc07d3240320262ed1d15839227c69b5a2af9e72dd848918a34d5735dd9fd11bc86c9a2ae833ab55ae

Tags

Signatures

  • Raccoon

    Description

    Simple but powerful infostealer which was very active in 2019.

    Tags

  • Raccoon Stealer Payload

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation