General

  • Target

    e2f869dbda506dd55ce32e94bd2fbc33a7952ccbcfce0c53ec0b2213e9956c0e.bin

  • Size

    299KB

  • Sample

    221003-19mb1aaaek

  • MD5

    a48e6cd92c2fab06ec310f64fce494a8

  • SHA1

    afda215f0b1bab516ad621ddd7ccaebef5309b0d

  • SHA256

    e2f869dbda506dd55ce32e94bd2fbc33a7952ccbcfce0c53ec0b2213e9956c0e

  • SHA512

    266f2b7e100df16ecd2f788c2f9c630504784e5e494eda83255b7801f9ed4b641dc381ccd1fa5ae7b49672731e147ee4c844ac2e52890d792185490a2b3f1c31

  • SSDEEP

    6144:qj8HssADt3hQWG2I7AZw2wMnE5XiWTs3MLFgk:qt9tRyr7AZw2ZMiJ3MP

Malware Config

Extracted

Family

raccoon

Botnet

c4376f037b1703b305ca5fb81f6ffc21

C2

http://5.252.23.112/

http://45.153.230.5/

rc4.plain

Targets

    • Target

      e2f869dbda506dd55ce32e94bd2fbc33a7952ccbcfce0c53ec0b2213e9956c0e.bin

    • Size

      299KB

    • MD5

      a48e6cd92c2fab06ec310f64fce494a8

    • SHA1

      afda215f0b1bab516ad621ddd7ccaebef5309b0d

    • SHA256

      e2f869dbda506dd55ce32e94bd2fbc33a7952ccbcfce0c53ec0b2213e9956c0e

    • SHA512

      266f2b7e100df16ecd2f788c2f9c630504784e5e494eda83255b7801f9ed4b641dc381ccd1fa5ae7b49672731e147ee4c844ac2e52890d792185490a2b3f1c31

    • SSDEEP

      6144:qj8HssADt3hQWG2I7AZw2wMnE5XiWTs3MLFgk:qt9tRyr7AZw2ZMiJ3MP

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks