General

  • Target

    cd63026ab52a2fad9176eb875ac2d1a3ab96cbaad2d01dca0337e29b330addd5

  • Size

    308KB

  • Sample

    231011-rxddwsfb77

  • MD5

    cb4cf9a9eadd2ee673a43f7b694f7583

  • SHA1

    9fc91bf9265ba091ab84377b857df9900ef6f0f6

  • SHA256

    cd63026ab52a2fad9176eb875ac2d1a3ab96cbaad2d01dca0337e29b330addd5

  • SHA512

    29f96f57144d43025e9ac0f6d421432cbe0445c9d096e45cc8f029a881c1dd1b01896afad9b910364be6dd35a5bc0c75013b990b03672e53965622de39177d24

  • SSDEEP

    6144:anrbrVsm+9A3BUY/tJ0ZWqeBjbvI5dSK:arVF0A3mY/YwqexLcf

Malware Config

Extracted

Family

raccoon

Botnet

982e12f7a62d0e0adaaadaab4c7c3e7f

C2

http://157.90.161.111:8086/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Targets

    • Target

      cd63026ab52a2fad9176eb875ac2d1a3ab96cbaad2d01dca0337e29b330addd5

    • Size

      308KB

    • MD5

      cb4cf9a9eadd2ee673a43f7b694f7583

    • SHA1

      9fc91bf9265ba091ab84377b857df9900ef6f0f6

    • SHA256

      cd63026ab52a2fad9176eb875ac2d1a3ab96cbaad2d01dca0337e29b330addd5

    • SHA512

      29f96f57144d43025e9ac0f6d421432cbe0445c9d096e45cc8f029a881c1dd1b01896afad9b910364be6dd35a5bc0c75013b990b03672e53965622de39177d24

    • SSDEEP

      6144:anrbrVsm+9A3BUY/tJ0ZWqeBjbvI5dSK:arVF0A3mY/YwqexLcf

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks