General

  • Target

    VCartoonizer.rar

  • Size

    188KB

  • Sample

    240716-ng4dlazenk

  • MD5

    4e8737565759c6cdfae1b72ae6a30b01

  • SHA1

    bc78902d70d1c54c7fcf2c9beaba79dee50bc1a3

  • SHA256

    cea7b1829ddbc61fc3ad02327e0102b9b0daee606fa7f47f226ae08abecc7964

  • SHA512

    bcfb660c4b4c6ccb1b7d3b2af1c5136561373ca1e06157a28f950da4691ce632db26303c9dd02259bb6d3ee5aa56679a3a208e3ab363b4d5a161e1013d27cbd7

  • SSDEEP

    3072:6qLIThf+lTZtvPqku6v1jgTwHThIUdrdYeDXNL8eybR3x5hYq:psThGxyk1uwLrd9BL8eyn5yq

Malware Config

Extracted

Family

raccoon

Botnet

dd188c0be5001b2c8fb76d74174694cd

C2

http://147.45.44.25:80/

http://85.28.47.116:80/

Attributes
  • user_agent

    MrBidenNeverKnow

xor.plain

Targets

    • Target

      VCartoonizer.exe

    • Size

      444.9MB

    • MD5

      990c2776648f18807d529dac58b72389

    • SHA1

      866a20d4a4d49a50e09c2ffee39c96f09fd7ee73

    • SHA256

      24283a726bd7eb1f2d0c9dce37f2e05160adf6f4830d6d4a9ecc985ec03df65b

    • SHA512

      daf45dac2b1a78b8bc6a79d1a06c3b8ae2d43a78a4c61d12a9c3b9b0bec60828bd7d1352b6cefb46b6b5cc126a99485a16a0e29b352e5dda9ba747cb3c0383da

    • SSDEEP

      6144:RFPK/bLjYIc9pxyN90vElTvWChzlS41R9d:RFC/f8y90svN/S2R9d

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

MITRE ATT&CK Matrix

Tasks