General

  • Target

    d49636d9780e434bea941ae28308cd47be08492463a60c60a396891abd49d78b

  • Size

    535KB

  • Sample

    230129-wfnwhshd9x

  • MD5

    1dc6abe4e96ffe2703b472d7b192d91c

  • SHA1

    f6e906d0c75d81ba9746c5f6e5d0c665f27f29cd

  • SHA256

    d49636d9780e434bea941ae28308cd47be08492463a60c60a396891abd49d78b

  • SHA512

    7d7917e426fddf8901607817683045fdddc6c44452aca42b5d73248f9f357a60800ca7d951c087f631ba3463db26a4ff976cf4e9c20b9532311755ab164c7a7a

  • SSDEEP

    12288:Vy+0LNxPvDGh3UytauXMJ3Mf9zWHkjs6vbEy4H3oEr6rBOYUj:Vy1LfvDGh3UyMu9qQs6zEyi3F63U

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      d49636d9780e434bea941ae28308cd47be08492463a60c60a396891abd49d78b

    • Size

      535KB

    • MD5

      1dc6abe4e96ffe2703b472d7b192d91c

    • SHA1

      f6e906d0c75d81ba9746c5f6e5d0c665f27f29cd

    • SHA256

      d49636d9780e434bea941ae28308cd47be08492463a60c60a396891abd49d78b

    • SHA512

      7d7917e426fddf8901607817683045fdddc6c44452aca42b5d73248f9f357a60800ca7d951c087f631ba3463db26a4ff976cf4e9c20b9532311755ab164c7a7a

    • SSDEEP

      12288:Vy+0LNxPvDGh3UytauXMJ3Mf9zWHkjs6vbEy4H3oEr6rBOYUj:Vy1LfvDGh3UyMu9qQs6zEyi3F63U

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks