General

  • Target

    ec3c75c8e1cb7e105ae92a9912afa6a5b887023fc8a7b50fdf56abcf8eb9fad1

  • Size

    530KB

  • Sample

    230129-wfk5mahd9t

  • MD5

    85a8de2d7ce5d76102908b62db78153b

  • SHA1

    80df8bd1cdbfb89f6bf3b22ca3c03dcdc94b35c9

  • SHA256

    ec3c75c8e1cb7e105ae92a9912afa6a5b887023fc8a7b50fdf56abcf8eb9fad1

  • SHA512

    0dd61cc5660874f834ab5781de218567ed0bcbb316b1de4fa64af07e39a9bdd6754913c75b95a05c9bf177ae20e3b47ab035b84c3446aa4b98a9f1d1b5a8a121

  • SSDEEP

    12288:ci0PO4kbyhBEA920SFk+ZsiCX5cZ1uobgX9To647FpVX:ciHbyhu00kvX5kuzxo647P

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      ec3c75c8e1cb7e105ae92a9912afa6a5b887023fc8a7b50fdf56abcf8eb9fad1

    • Size

      530KB

    • MD5

      85a8de2d7ce5d76102908b62db78153b

    • SHA1

      80df8bd1cdbfb89f6bf3b22ca3c03dcdc94b35c9

    • SHA256

      ec3c75c8e1cb7e105ae92a9912afa6a5b887023fc8a7b50fdf56abcf8eb9fad1

    • SHA512

      0dd61cc5660874f834ab5781de218567ed0bcbb316b1de4fa64af07e39a9bdd6754913c75b95a05c9bf177ae20e3b47ab035b84c3446aa4b98a9f1d1b5a8a121

    • SSDEEP

      12288:ci0PO4kbyhBEA920SFk+ZsiCX5cZ1uobgX9To647FpVX:ciHbyhu00kvX5kuzxo647P

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks