General

  • Target

    1f10199eb033205b4090768d65241b31.exe

  • Size

    316KB

  • Sample

    230724-nqj2bada9y

  • MD5

    1f10199eb033205b4090768d65241b31

  • SHA1

    24b95a520e39f44911e59e7ed2c813509db3a015

  • SHA256

    b067d6dee2b1f707df5046fc59f9eaaeecde74234e949983a6fd90befeacd9e3

  • SHA512

    964b339dc3a7b4d3aada83565c52e557dfe4c913d243922908850d539d5cd17509caca8b3dc6c9abfc233ae8882daf1455c7527357f78970637b522a7db76849

  • SSDEEP

    3072:qmpLbXPLewf7Fdry+yonVxcvx3pq+HCcm6yetmU5WOTvCzS0Jkue:tLrLewfHm+r4x3pt3mde4382SL

Malware Config

Extracted

Family

raccoon

Botnet

20f4a91c61f63af35df3e278591a8e70

C2

http://5.161.69.57:8088/

xor.plain

Targets

    • Target

      1f10199eb033205b4090768d65241b31.exe

    • Size

      316KB

    • MD5

      1f10199eb033205b4090768d65241b31

    • SHA1

      24b95a520e39f44911e59e7ed2c813509db3a015

    • SHA256

      b067d6dee2b1f707df5046fc59f9eaaeecde74234e949983a6fd90befeacd9e3

    • SHA512

      964b339dc3a7b4d3aada83565c52e557dfe4c913d243922908850d539d5cd17509caca8b3dc6c9abfc233ae8882daf1455c7527357f78970637b522a7db76849

    • SSDEEP

      3072:qmpLbXPLewf7Fdry+yonVxcvx3pq+HCcm6yetmU5WOTvCzS0Jkue:tLrLewfHm+r4x3pt3mde4382SL

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks