General

  • Target

    Setup.exe

  • Size

    771.4MB

  • Sample

    240411-zg6z9sce38

  • MD5

    ffe8bc9fc555ea52e70a6bc12312fc63

  • SHA1

    588440491cee2058b8b3371992eddee0974f8ebf

  • SHA256

    1563848a0922d9f812561a1de0d283d8f555ff6033859eac55c8bcd3e8384f7e

  • SHA512

    fa48f41d7011f2910f452db2268b5bd5b21a824584fd71a684edaf432252ffd0932d53b86fc12770640e64b9b93e8c84df1e0440c024d0207d521f67eccaff6d

  • SSDEEP

    25165824:snnnnnnnnnnnnnnnnnnnnnpnnnnnnnnnnnnnnnnnnnnnpnnnq:snnnnnnnnnnnnnnnnnnnnnpnnnnnnnnY

Malware Config

Extracted

Family

raccoon

Botnet

9860ca26c485252b154e235f5ec11f71

C2

http://94.142.138.228:80/

Attributes
  • user_agent

    DuckTales

xor.plain

Targets

    • Target

      Setup.exe

    • Size

      771.4MB

    • MD5

      ffe8bc9fc555ea52e70a6bc12312fc63

    • SHA1

      588440491cee2058b8b3371992eddee0974f8ebf

    • SHA256

      1563848a0922d9f812561a1de0d283d8f555ff6033859eac55c8bcd3e8384f7e

    • SHA512

      fa48f41d7011f2910f452db2268b5bd5b21a824584fd71a684edaf432252ffd0932d53b86fc12770640e64b9b93e8c84df1e0440c024d0207d521f67eccaff6d

    • SSDEEP

      25165824:snnnnnnnnnnnnnnnnnnnnnpnnnnnnnnnnnnnnnnnnnnnpnnnq:snnnnnnnnnnnnnnnnnnnnnpnnnnnnnnY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

MITRE ATT&CK Matrix

Tasks