General

  • Target

    5bea939229e8be4c921367fc999ae2d5

  • Size

    541KB

  • Sample

    231219-tvh8gaffa7

  • MD5

    5bea939229e8be4c921367fc999ae2d5

  • SHA1

    30b4c1645deb8c735fafa79765b8e6706aeced42

  • SHA256

    e31c8add5a296ace06bf347134af0a6f6677beb4052ef05b8b4fa05a4eb0f5bd

  • SHA512

    89030cfc297e1e66d65cc01a9c6eca653cf2222af6e0bab8fb259a85463cf4450840fcd065fc948d566ed6e12afee459d85f764377aabd8a379f12422557f295

  • SSDEEP

    12288:5cnmCXlQkA8Z20QQV0GyiZyU5mi428HMIc7wjr0zxp6Lr:56O78Z2iDXZyU5mi428HM7wf436Lr

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

e672747afc67feb221ca60f8fc9e03adcf10f038

Attributes
  • url4cnc

    http://teletop.top/youyouhell0world

    http://teleta.top/youyouhell0world

    https://t.me/youyouhell0world

rc4.plain
rc4.plain

Targets

    • Target

      5bea939229e8be4c921367fc999ae2d5

    • Size

      541KB

    • MD5

      5bea939229e8be4c921367fc999ae2d5

    • SHA1

      30b4c1645deb8c735fafa79765b8e6706aeced42

    • SHA256

      e31c8add5a296ace06bf347134af0a6f6677beb4052ef05b8b4fa05a4eb0f5bd

    • SHA512

      89030cfc297e1e66d65cc01a9c6eca653cf2222af6e0bab8fb259a85463cf4450840fcd065fc948d566ed6e12afee459d85f764377aabd8a379f12422557f295

    • SSDEEP

      12288:5cnmCXlQkA8Z20QQV0GyiZyU5mi428HMIc7wjr0zxp6Lr:56O78Z2iDXZyU5mi428HM7wf436Lr

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix

Tasks