General

  • Target

    cf0685d36136edb0d0ec32752637f6aa3d08c3005ad89695ab73db6f0c551483

  • Size

    530KB

  • Sample

    230129-wfr8yahe2s

  • MD5

    71c374d3c6f5fc141597d0be5b9b79e5

  • SHA1

    698b35119621c47519a2b945aef678e3d6fdf9e5

  • SHA256

    cf0685d36136edb0d0ec32752637f6aa3d08c3005ad89695ab73db6f0c551483

  • SHA512

    03f9726ae98e3cf9df1cdbe579aaec362890e8b63ff800f906b15a8742e3023aaaaaaafb98614927544cf04ef340fc9861de617db809c09bb1231c01fc61d143

  • SSDEEP

    12288:N3fPO4Qb+hhk4kDJCUXwmuz4gdkOy+e5H7OISzUU:N32b+hDkDp6WT5HiISA

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      cf0685d36136edb0d0ec32752637f6aa3d08c3005ad89695ab73db6f0c551483

    • Size

      530KB

    • MD5

      71c374d3c6f5fc141597d0be5b9b79e5

    • SHA1

      698b35119621c47519a2b945aef678e3d6fdf9e5

    • SHA256

      cf0685d36136edb0d0ec32752637f6aa3d08c3005ad89695ab73db6f0c551483

    • SHA512

      03f9726ae98e3cf9df1cdbe579aaec362890e8b63ff800f906b15a8742e3023aaaaaaafb98614927544cf04ef340fc9861de617db809c09bb1231c01fc61d143

    • SSDEEP

      12288:N3fPO4Qb+hhk4kDJCUXwmuz4gdkOy+e5H7OISzUU:N32b+hDkDp6WT5HiISA

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks