General

  • Target

    63af40b1d703c68895be3ce329c30a28d46e1048b9c109b97453ab580a1d088c

  • Size

    538KB

  • Sample

    230129-wgaqaaga84

  • MD5

    29c312e3ddf1078921218b8f7808bf0b

  • SHA1

    b60d65bd228324df3924096b68f1632915483913

  • SHA256

    63af40b1d703c68895be3ce329c30a28d46e1048b9c109b97453ab580a1d088c

  • SHA512

    2bee59d1c1d340b0719062b361694c3fd878ecc5807c216dd452b34bd04d55977f51e09d96f629b2e583b8e48b40356cec223dc8c1d12ad07caf8980e4946275

  • SSDEEP

    12288:L/exbYv0+TjBy+wExK2mSO8xL4F6j2U8D5KR+zqiz:Lmys+TlWMK2ZOEL4F6/8X+S

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target

      63af40b1d703c68895be3ce329c30a28d46e1048b9c109b97453ab580a1d088c

    • Size

      538KB

    • MD5

      29c312e3ddf1078921218b8f7808bf0b

    • SHA1

      b60d65bd228324df3924096b68f1632915483913

    • SHA256

      63af40b1d703c68895be3ce329c30a28d46e1048b9c109b97453ab580a1d088c

    • SHA512

      2bee59d1c1d340b0719062b361694c3fd878ecc5807c216dd452b34bd04d55977f51e09d96f629b2e583b8e48b40356cec223dc8c1d12ad07caf8980e4946275

    • SSDEEP

      12288:L/exbYv0+TjBy+wExK2mSO8xL4F6j2U8D5KR+zqiz:Lmys+TlWMK2ZOEL4F6/8X+S

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks