General

  • Target

    ce85db03754bb4c233147c1613428191696dcf3225acc172882fad554f96ddfd

  • Size

    464KB

  • Sample

    230129-z34f9sda95

  • MD5

    66a0da1cb32c4b677e7f8457985db36b

  • SHA1

    853d021825792251ee506fffdfbb1928fc72a6d8

  • SHA256

    ce85db03754bb4c233147c1613428191696dcf3225acc172882fad554f96ddfd

  • SHA512

    ab4ceef701cd85f77eb26f296d06a370a85bcf6da37d6e3d48d3a62af4b2ca7ee33e6d2fb3c56d1d089716ddfa650506a8e1b2ce00a3ff90b8caf8e283e72aca

  • SSDEEP

    12288:wR0OI2gEOnrQd+KHkGV4Xi1pmN0O6AmdFlE3BIFVyO:wMEmrQkKHkGV4Xi1wN0O6AmTl4BI7Z

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      ce85db03754bb4c233147c1613428191696dcf3225acc172882fad554f96ddfd

    • Size

      464KB

    • MD5

      66a0da1cb32c4b677e7f8457985db36b

    • SHA1

      853d021825792251ee506fffdfbb1928fc72a6d8

    • SHA256

      ce85db03754bb4c233147c1613428191696dcf3225acc172882fad554f96ddfd

    • SHA512

      ab4ceef701cd85f77eb26f296d06a370a85bcf6da37d6e3d48d3a62af4b2ca7ee33e6d2fb3c56d1d089716ddfa650506a8e1b2ce00a3ff90b8caf8e283e72aca

    • SSDEEP

      12288:wR0OI2gEOnrQd+KHkGV4Xi1pmN0O6AmdFlE3BIFVyO:wMEmrQkKHkGV4Xi1wN0O6AmTl4BI7Z

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks