General

  • Target

    d1df925bb71198bc73a8a6a3b2c9718a

  • Size

    497KB

  • Sample

    240317-zywwmagf9z

  • MD5

    d1df925bb71198bc73a8a6a3b2c9718a

  • SHA1

    52daaa5ef8e8df0d71c4d846ea243ac74c7c32e6

  • SHA256

    a6f0dc73e69c768ad702394dc9250700e54e3439a9adb609b119292f70200522

  • SHA512

    acbb0beee1a795aa42667693998efd23304182793eabfdc22e9102d78c8f45b34dcb1677bc286b58ba8ce0aca12781ad1580df1665f3e80fe8cc8635e4e8cc25

  • SSDEEP

    12288:EhuAaTmefxMmGyU32gKFN0YR7rjks62d629+j+RkPs5BM9S:XAa3knJAeyjj9J91C

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

093fc32b9e79472deedeb85910e1cd0f5f2b85bf

Attributes
  • url4cnc

    https://telete.in/newmanwaterwall

rc4.plain
rc4.plain

Targets

    • Target

      d1df925bb71198bc73a8a6a3b2c9718a

    • Size

      497KB

    • MD5

      d1df925bb71198bc73a8a6a3b2c9718a

    • SHA1

      52daaa5ef8e8df0d71c4d846ea243ac74c7c32e6

    • SHA256

      a6f0dc73e69c768ad702394dc9250700e54e3439a9adb609b119292f70200522

    • SHA512

      acbb0beee1a795aa42667693998efd23304182793eabfdc22e9102d78c8f45b34dcb1677bc286b58ba8ce0aca12781ad1580df1665f3e80fe8cc8635e4e8cc25

    • SSDEEP

      12288:EhuAaTmefxMmGyU32gKFN0YR7rjks62d629+j+RkPs5BM9S:XAa3knJAeyjj9J91C

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks