General

  • Target

    287f2de93dae6dda7dc61eeeb914c13c635cba932ac7b85407e0e6dc9bb96471

  • Size

    538KB

  • Sample

    230129-wgj9qaga94

  • MD5

    0f5b3e9d54082b35d53487803181fe8c

  • SHA1

    97655159ebd70c43b7e4396670f77cc6b269fa26

  • SHA256

    287f2de93dae6dda7dc61eeeb914c13c635cba932ac7b85407e0e6dc9bb96471

  • SHA512

    6079e4a870c1db3dc6889175bd45191031e37c6fa483324b26dbadd4e33b63f4c24324c9137b296bbfa2c00cd61b296ccc96b9396b098f8892b511892df9cb54

  • SSDEEP

    12288:C/exbYv0+TjhS+pw/SDYtd2pPUOwQdgx3BWypNSFcg:Cmys+TFjwqDI8pPHbK3BWINacg

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      287f2de93dae6dda7dc61eeeb914c13c635cba932ac7b85407e0e6dc9bb96471

    • Size

      538KB

    • MD5

      0f5b3e9d54082b35d53487803181fe8c

    • SHA1

      97655159ebd70c43b7e4396670f77cc6b269fa26

    • SHA256

      287f2de93dae6dda7dc61eeeb914c13c635cba932ac7b85407e0e6dc9bb96471

    • SHA512

      6079e4a870c1db3dc6889175bd45191031e37c6fa483324b26dbadd4e33b63f4c24324c9137b296bbfa2c00cd61b296ccc96b9396b098f8892b511892df9cb54

    • SSDEEP

      12288:C/exbYv0+TjhS+pw/SDYtd2pPUOwQdgx3BWypNSFcg:Cmys+TFjwqDI8pPHbK3BWINacg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks