General

  • Target

    05da314cb6352b3e8875021f5433602ceaf3e1cebbc78f161a4defca03790370

  • Size

    308KB

  • Sample

    231011-s1m8yagc2t

  • MD5

    93c3a0134a8b51f20b3904ddeeb55310

  • SHA1

    a99f5783928fe4feaf428e7d32af5e1e737e0620

  • SHA256

    05da314cb6352b3e8875021f5433602ceaf3e1cebbc78f161a4defca03790370

  • SHA512

    19554aeb290bf986141c59f03246d209bc43ff8ef594871334c4744e382bfec5b991d2607a670d23da90670f21b1a95403d2ef76d52e9904e6fc42ccdf04180d

  • SSDEEP

    3072:ldpQMTwmmw0ldSWsziauAfT0/L2tlOPt1hDyLxN1Xs8yjB8bOl:HpQM0mVAdSjGVAwzAlEuQFB8K

Malware Config

Extracted

Family

raccoon

Botnet

982e12f7a62d0e0adaaadaab4c7c3e7f

C2

http://157.90.161.111:8086/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Targets

    • Target

      05da314cb6352b3e8875021f5433602ceaf3e1cebbc78f161a4defca03790370

    • Size

      308KB

    • MD5

      93c3a0134a8b51f20b3904ddeeb55310

    • SHA1

      a99f5783928fe4feaf428e7d32af5e1e737e0620

    • SHA256

      05da314cb6352b3e8875021f5433602ceaf3e1cebbc78f161a4defca03790370

    • SHA512

      19554aeb290bf986141c59f03246d209bc43ff8ef594871334c4744e382bfec5b991d2607a670d23da90670f21b1a95403d2ef76d52e9904e6fc42ccdf04180d

    • SSDEEP

      3072:ldpQMTwmmw0ldSWsziauAfT0/L2tlOPt1hDyLxN1Xs8yjB8bOl:HpQM0mVAdSjGVAwzAlEuQFB8K

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer payload

MITRE ATT&CK Matrix

Tasks