General

  • Target

    tmp

  • Size

    3.5MB

  • Sample

    230814-vafghsff31

  • MD5

    4695f98bf6e8c0908c0b6af77ec31a6c

  • SHA1

    41b05253a583238d6c583a97eb6d45e92607f53d

  • SHA256

    36dc266ad1ea8df01393368710ee6c6fd21629e833252cf0f3f63dffd908c805

  • SHA512

    b85d91a68c514e2e27d0a1b72aa7d12abed855953944eb2ab7a723a9770972b94434416a2415fc46a3aee516642121329b22eb61f80fc760d011da0ce4acfb30

  • SSDEEP

    24576:Pam/O3RT2048qUkeSLdnC/sGB9D/YBl7B3Yom6pd+e6idu6sN6FCBfcW877++aIS:PaZ3Rb4UScABl7B3YH6pd+e6i

Malware Config

Extracted

Family

raccoon

Botnet

071a7b18a42c1cd94de2fc5bb0bbcaf2

C2

http://193.142.147.59:80

xor.plain

Targets

    • Target

      tmp

    • Size

      3.5MB

    • MD5

      4695f98bf6e8c0908c0b6af77ec31a6c

    • SHA1

      41b05253a583238d6c583a97eb6d45e92607f53d

    • SHA256

      36dc266ad1ea8df01393368710ee6c6fd21629e833252cf0f3f63dffd908c805

    • SHA512

      b85d91a68c514e2e27d0a1b72aa7d12abed855953944eb2ab7a723a9770972b94434416a2415fc46a3aee516642121329b22eb61f80fc760d011da0ce4acfb30

    • SSDEEP

      24576:Pam/O3RT2048qUkeSLdnC/sGB9D/YBl7B3Yom6pd+e6idu6sN6FCBfcW877++aIS:PaZ3Rb4UScABl7B3YH6pd+e6i

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks