General

  • Target

    ca8fed5a1394c4c680b5d261d4bb688c

  • Size

    900KB

  • Sample

    240315-fvdq4aba54

  • MD5

    ca8fed5a1394c4c680b5d261d4bb688c

  • SHA1

    3e41eb13b33e2be9d15bc16352cb7cae1fa33b8d

  • SHA256

    5c4413fce239cfb51d0ef602b465626ea660649639bfc57a583c4142dad3dfe4

  • SHA512

    3ff22d11caecc3985416cc72ae4a344853d9e8427168de72d940ba70a003f155a677bc9fc3a9503a758e9eed907ddd48a7715fc54bea744afa1745d86c751101

  • SSDEEP

    24576:i4c3+VbG0AOOy8Gq73UpdWuwWggp0F8pQ5:ics0lOwq7Sp0FH

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

d7b6e0cee1cd813ad40c812cf45171cf0360e249

Attributes
  • url4cnc

    https://telete.in/mimipanera11

rc4.plain
rc4.plain

Targets

    • Target

      ca8fed5a1394c4c680b5d261d4bb688c

    • Size

      900KB

    • MD5

      ca8fed5a1394c4c680b5d261d4bb688c

    • SHA1

      3e41eb13b33e2be9d15bc16352cb7cae1fa33b8d

    • SHA256

      5c4413fce239cfb51d0ef602b465626ea660649639bfc57a583c4142dad3dfe4

    • SHA512

      3ff22d11caecc3985416cc72ae4a344853d9e8427168de72d940ba70a003f155a677bc9fc3a9503a758e9eed907ddd48a7715fc54bea744afa1745d86c751101

    • SSDEEP

      24576:i4c3+VbG0AOOy8Gq73UpdWuwWggp0F8pQ5:ics0lOwq7Sp0FH

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks