General

  • Target

    2821b3f16ea555d9e3247f49e2d36a5efd0bfc59a62824c06780355d379ce035

  • Size

    168KB

  • Sample

    220810-s9rmqaeae4

  • MD5

    d42a1a53d64510c0da2db47c7e564c7c

  • SHA1

    99f738a91bc45864ef546beac345a0adfe82655e

  • SHA256

    2821b3f16ea555d9e3247f49e2d36a5efd0bfc59a62824c06780355d379ce035

  • SHA512

    8b45631769beb803fe373e154bb04ba2957ed04261fe4d037f6581688d7006f1c0c75698ffb2037e25840500173e4453b81579f3cb3ad0aa46669c024a6646f7

Malware Config

Extracted

Family

raccoon

Botnet

c4376f037b1703b305ca5fb81f6ffc21

C2

http://5.252.23.112/

http://45.153.230.5/

rc4.plain

Targets

    • Target

      2821b3f16ea555d9e3247f49e2d36a5efd0bfc59a62824c06780355d379ce035

    • Size

      168KB

    • MD5

      d42a1a53d64510c0da2db47c7e564c7c

    • SHA1

      99f738a91bc45864ef546beac345a0adfe82655e

    • SHA256

      2821b3f16ea555d9e3247f49e2d36a5efd0bfc59a62824c06780355d379ce035

    • SHA512

      8b45631769beb803fe373e154bb04ba2957ed04261fe4d037f6581688d7006f1c0c75698ffb2037e25840500173e4453b81579f3cb3ad0aa46669c024a6646f7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks