General

  • Target

    13840c61456511d77e554a01959f37f938cc27b3f45ed50ddb2afb6a98bb8dd2

  • Size

    535KB

  • Sample

    230129-wgq29she4v

  • MD5

    c64786832e55da5bf225f8543bb93b3b

  • SHA1

    5922a67494caf1f01ef0c0397c8ca1835521b866

  • SHA256

    13840c61456511d77e554a01959f37f938cc27b3f45ed50ddb2afb6a98bb8dd2

  • SHA512

    4ab1c7545ee8159a1a6a5c7a77e890ebef66efbe31d7999033a58738fddfbcd809bfce5fcb5bfb1e4a836675c2509e9edcdc48323ccb36d768ae6b284f9b993f

  • SSDEEP

    12288:AUJ0LNRT2Khq5lBaFzuWbnDwKJMhRxEEAjugOFPULNYIKfYvBwK3fA:AUqLv2Khq5l45nDKRxEFrhYU3I

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      13840c61456511d77e554a01959f37f938cc27b3f45ed50ddb2afb6a98bb8dd2

    • Size

      535KB

    • MD5

      c64786832e55da5bf225f8543bb93b3b

    • SHA1

      5922a67494caf1f01ef0c0397c8ca1835521b866

    • SHA256

      13840c61456511d77e554a01959f37f938cc27b3f45ed50ddb2afb6a98bb8dd2

    • SHA512

      4ab1c7545ee8159a1a6a5c7a77e890ebef66efbe31d7999033a58738fddfbcd809bfce5fcb5bfb1e4a836675c2509e9edcdc48323ccb36d768ae6b284f9b993f

    • SSDEEP

      12288:AUJ0LNRT2Khq5lBaFzuWbnDwKJMhRxEEAjugOFPULNYIKfYvBwK3fA:AUqLv2Khq5l45nDKRxEFrhYU3I

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks