General

  • Target

    0db70a3c4f13c0bd9f84a10a4a06ecf13024a1856a578dc4e862e2f63b22f50e

  • Size

    528KB

  • Sample

    230129-ylnttabe22

  • MD5

    66f32ba881e7510e678e8fe09aeb0278

  • SHA1

    4adacc15988d5bf335a05c910db232b7ab8a55f6

  • SHA256

    0db70a3c4f13c0bd9f84a10a4a06ecf13024a1856a578dc4e862e2f63b22f50e

  • SHA512

    8c1d7a5414729d13eb0ca3838a822493074a2408da1651d8200212a472d24ba586027af4275b6d82c6adfafbf351780558434f10ca9c542e13934abb0a2c1bc1

  • SSDEEP

    12288:bx5hCEBySM27f1D2W562G7FLU13uOrjNy1Jhb1aM:bxTsSM2127nY1+QxI5

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target

      0db70a3c4f13c0bd9f84a10a4a06ecf13024a1856a578dc4e862e2f63b22f50e

    • Size

      528KB

    • MD5

      66f32ba881e7510e678e8fe09aeb0278

    • SHA1

      4adacc15988d5bf335a05c910db232b7ab8a55f6

    • SHA256

      0db70a3c4f13c0bd9f84a10a4a06ecf13024a1856a578dc4e862e2f63b22f50e

    • SHA512

      8c1d7a5414729d13eb0ca3838a822493074a2408da1651d8200212a472d24ba586027af4275b6d82c6adfafbf351780558434f10ca9c542e13934abb0a2c1bc1

    • SSDEEP

      12288:bx5hCEBySM27f1D2W562G7FLU13uOrjNy1Jhb1aM:bxTsSM2127nY1+QxI5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks