General

  • Target

    493720da6f498098a54ae36cc97c04ec96880444030324bd043b66233899b8fe

  • Size

    2.7MB

  • Sample

    240319-xgc13scd8z

  • MD5

    0fe65a8555fb9d6a019c265efbccaf50

  • SHA1

    c5527780ba3b4b495b9ae3b90ae43f55fa08db27

  • SHA256

    493720da6f498098a54ae36cc97c04ec96880444030324bd043b66233899b8fe

  • SHA512

    a5cded74fb81c22a56517287850a162998f69e5fb3ba426b3259e9492f43ef70f3e3715cb6b81f878399e8b0ed9633dbb84297e4b7f35a64227adfaca140b672

  • SSDEEP

    49152:mobxvbkfN8ObOQzhSSsOfADj58PFxDEF4B6iETw/tM3:ZdvgN8yaDqPFxDb0TD3

Malware Config

Extracted

Family

raccoon

Botnet

1adeb438cd8ab2abb4349e0ca6853b53

C2

http://45.67.35.164

http://185.242.86.142

http://5.182.36.75

http://185.242.86.143

Attributes
  • user_agent

    23591

xor.plain

Targets

    • Target

      493720da6f498098a54ae36cc97c04ec96880444030324bd043b66233899b8fe

    • Size

      2.7MB

    • MD5

      0fe65a8555fb9d6a019c265efbccaf50

    • SHA1

      c5527780ba3b4b495b9ae3b90ae43f55fa08db27

    • SHA256

      493720da6f498098a54ae36cc97c04ec96880444030324bd043b66233899b8fe

    • SHA512

      a5cded74fb81c22a56517287850a162998f69e5fb3ba426b3259e9492f43ef70f3e3715cb6b81f878399e8b0ed9633dbb84297e4b7f35a64227adfaca140b672

    • SSDEEP

      49152:mobxvbkfN8ObOQzhSSsOfADj58PFxDEF4B6iETw/tM3:ZdvgN8yaDqPFxDb0TD3

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

MITRE ATT&CK Matrix

Tasks