General

  • Target

    b159631a705d9275bab65c5449aa6675

  • Size

    535KB

  • Sample

    240304-gb4zlsbb9s

  • MD5

    b159631a705d9275bab65c5449aa6675

  • SHA1

    19c356251fdee08c9d661639cd73c954387bbc1a

  • SHA256

    64781bc15996584b320f4436adc0b7fb1dd869664aab443ef3c1f1684b62c6e0

  • SHA512

    f835e882462f76b5e884da4d1e293040f03d996170eda43d1ad4782cd3e46d360193868358262f9a284a0a53b31bef7658fa55161f9c9d35e1cb5d1ac2c59693

  • SSDEEP

    12288:vmoLyPoT0x3o0x3SFUuPxAhX7sZbvBiroW3A:+oy1o0gFUUxAtoZTBsoWQ

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

2e2380246c8188eea83374f93a363f01188de9ff

Attributes
  • url4cnc

    https://tttttt.me/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      b159631a705d9275bab65c5449aa6675

    • Size

      535KB

    • MD5

      b159631a705d9275bab65c5449aa6675

    • SHA1

      19c356251fdee08c9d661639cd73c954387bbc1a

    • SHA256

      64781bc15996584b320f4436adc0b7fb1dd869664aab443ef3c1f1684b62c6e0

    • SHA512

      f835e882462f76b5e884da4d1e293040f03d996170eda43d1ad4782cd3e46d360193868358262f9a284a0a53b31bef7658fa55161f9c9d35e1cb5d1ac2c59693

    • SSDEEP

      12288:vmoLyPoT0x3o0x3SFUuPxAhX7sZbvBiroW3A:+oy1o0gFUUxAtoZTBsoWQ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks