General

  • Target

    0df4d085fc7efb1700b9d547006eae8ccfe1edeee8395555ff15e476d7736236

  • Size

    538KB

  • Sample

    230129-wgrnsshe4w

  • MD5

    3e50c05017763de7bad56f03afc4406f

  • SHA1

    05ff58d27dbd36c54f9a19f909feb79591fe361d

  • SHA256

    0df4d085fc7efb1700b9d547006eae8ccfe1edeee8395555ff15e476d7736236

  • SHA512

    59e89952f14324b973f2aeb0f71f80d283b97404840e09e6aaf3e6bcc93053cba8cc73df1d4aea4d1106c6d9d5043d1cc42cefe9c47200254ef2432bca10beef

  • SSDEEP

    12288:FFexvwQ0qfjdLu4tnpIZkAtLCopegKGFaSeO03nC/JZQV0:FouVqf5dsC6OoggRanO0XkJZQV

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target

      0df4d085fc7efb1700b9d547006eae8ccfe1edeee8395555ff15e476d7736236

    • Size

      538KB

    • MD5

      3e50c05017763de7bad56f03afc4406f

    • SHA1

      05ff58d27dbd36c54f9a19f909feb79591fe361d

    • SHA256

      0df4d085fc7efb1700b9d547006eae8ccfe1edeee8395555ff15e476d7736236

    • SHA512

      59e89952f14324b973f2aeb0f71f80d283b97404840e09e6aaf3e6bcc93053cba8cc73df1d4aea4d1106c6d9d5043d1cc42cefe9c47200254ef2432bca10beef

    • SSDEEP

      12288:FFexvwQ0qfjdLu4tnpIZkAtLCopegKGFaSeO03nC/JZQV0:FouVqf5dsC6OoggRanO0XkJZQV

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks