General

  • Target

    cb286c9b98bbf94aee0c25d4ce619bc4

  • Size

    528KB

  • Sample

    240315-mdfbxsgb74

  • MD5

    cb286c9b98bbf94aee0c25d4ce619bc4

  • SHA1

    86fc88249d57e178df2272c857a5e090844c5161

  • SHA256

    7838e3b48693351eaa30bf7caf00c3b2bbe9c9595151d137cfc7c2f306af1ee2

  • SHA512

    2f9d3b6d348da9d6213dbf5007b4d12c7968036cbeab8a9e5f8b1ef285f60b727c218020715809727a343c5557ac20fd0b9ef82f6b6e65de7296e198fc34d15d

  • SSDEEP

    12288:oshS3eRm4lUx5xhNGp6h+zuJzpgE1ikqIJp1w:osM3um4oLNOz6v1iA1w

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

5193e44859ad5804816e1760796dfa9e275878b8

Attributes
  • url4cnc

    https://telete.in/uipromrdarkpirat

rc4.plain
rc4.plain

Targets

    • Target

      cb286c9b98bbf94aee0c25d4ce619bc4

    • Size

      528KB

    • MD5

      cb286c9b98bbf94aee0c25d4ce619bc4

    • SHA1

      86fc88249d57e178df2272c857a5e090844c5161

    • SHA256

      7838e3b48693351eaa30bf7caf00c3b2bbe9c9595151d137cfc7c2f306af1ee2

    • SHA512

      2f9d3b6d348da9d6213dbf5007b4d12c7968036cbeab8a9e5f8b1ef285f60b727c218020715809727a343c5557ac20fd0b9ef82f6b6e65de7296e198fc34d15d

    • SSDEEP

      12288:oshS3eRm4lUx5xhNGp6h+zuJzpgE1ikqIJp1w:osM3um4oLNOz6v1iA1w

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks