General

  • Target

    e9f10c8c32952054ffb16dc8dc128c724a8a94d6368b572eb590be9e301933bc

  • Size

    385KB

  • Sample

    220520-rx4ababefp

  • MD5

    99dff7f8c3247349fe8bdc86543946b2

  • SHA1

    dfc8a387ebb6ca2f47960e9518ef24c459cf8133

  • SHA256

    e9f10c8c32952054ffb16dc8dc128c724a8a94d6368b572eb590be9e301933bc

  • SHA512

    ec225599fb18be8164f57d41e13375509db6a213a85b8fd2bf0c23f2f9b3fc86f3e289ec14cdf62b28fb35ae2fb3525a44a7968989c469e6d64c2aa001a1e1d0

Malware Config

Extracted

Family

raccoon

Botnet

e29019d302d3c4858d02133aa50d6f91fdba32ce

Attributes
  • url4cnc

    https://telete.in/h_dmartens_1

rc4.plain
rc4.plain

Targets

    • Target

      Payment_copyUSD_pdf.exe

    • Size

      443KB

    • MD5

      63318f287f84a300750a2236901f357e

    • SHA1

      bc98b692a27350b81694288783b17647739917d9

    • SHA256

      13b574bdacbd66335eb90d98e9be0e0bbd36373658a41c691d25b1d39c3621e4

    • SHA512

      f993591ddec78cd4da277e44333fcf5a8b24c13123c81bbc07d3240320262ed1d15839227c69b5a2af9e72dd848918a34d5735dd9fd11bc86c9a2ae833ab55ae

    • Raccoon

      Simple but powerful infostealer which was very active in 2019.

    • Raccoon Stealer Payload

MITRE ATT&CK Matrix

Tasks