General

  • Target

    c6030e0242b26ae8b7e91fe955b968c7

  • Size

    495KB

  • Sample

    240313-qxl6csfg73

  • MD5

    c6030e0242b26ae8b7e91fe955b968c7

  • SHA1

    117d4defb36e1219f7470b1eaa9264487acfa38e

  • SHA256

    f0e671022914d539538e9f73a8e0f96c6a416f8874af88bf6e177e48b7ada9d4

  • SHA512

    d77a0bdc383f507757a594437c1bba3331f87998f6c8ef45e90bd482e623677fb581c120fbe48f5e63ce875d9a24f8c991e341cc774e6054722eafde656564e3

  • SSDEEP

    12288:DwTyvUI/RiPI64MPJPz0I+AUPTNsujHWfdLQl:8uUIQbw5Aempfd

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

bac43ff4dde92a8df810d51dadf9203332537d0a

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      c6030e0242b26ae8b7e91fe955b968c7

    • Size

      495KB

    • MD5

      c6030e0242b26ae8b7e91fe955b968c7

    • SHA1

      117d4defb36e1219f7470b1eaa9264487acfa38e

    • SHA256

      f0e671022914d539538e9f73a8e0f96c6a416f8874af88bf6e177e48b7ada9d4

    • SHA512

      d77a0bdc383f507757a594437c1bba3331f87998f6c8ef45e90bd482e623677fb581c120fbe48f5e63ce875d9a24f8c991e341cc774e6054722eafde656564e3

    • SSDEEP

      12288:DwTyvUI/RiPI64MPJPz0I+AUPTNsujHWfdLQl:8uUIQbw5Aempfd

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks