General

  • Target

    2049ea349d3447edc2dcb38abc52b8c0N.exe

  • Size

    339KB

  • Sample

    240813-fhwfdavfme

  • MD5

    2049ea349d3447edc2dcb38abc52b8c0

  • SHA1

    96e1da2cd9d9118acd037414be94b1674c16821f

  • SHA256

    105337b8fc4e73342f088682defad087131a6c207d2c06258052c1a80247f9ba

  • SHA512

    9ca1ec4393fb8b42dbfeec918a58b3ce2a553ea634677eb3f9c2c4ef121d07d44fb477947ccfc7a2a29c389fd7f5b8ad8566cf066dcf7d5c55d98fbd30654639

  • SSDEEP

    6144:J6vmlLvL/ezJnHRljTqUDi93S5dEOPZElnyHSMJY:J6vmlX/oxlHqUDixS5dEOkTMJ

Malware Config

Extracted

Family

raccoon

Botnet

64b445f2d85b7aeb3d5c7b23112d6ac3

C2

http://45.15.156.209/

Attributes
  • user_agent

    23591

xor.plain

Targets

    • Target

      2049ea349d3447edc2dcb38abc52b8c0N.exe

    • Size

      339KB

    • MD5

      2049ea349d3447edc2dcb38abc52b8c0

    • SHA1

      96e1da2cd9d9118acd037414be94b1674c16821f

    • SHA256

      105337b8fc4e73342f088682defad087131a6c207d2c06258052c1a80247f9ba

    • SHA512

      9ca1ec4393fb8b42dbfeec918a58b3ce2a553ea634677eb3f9c2c4ef121d07d44fb477947ccfc7a2a29c389fd7f5b8ad8566cf066dcf7d5c55d98fbd30654639

    • SSDEEP

      6144:J6vmlLvL/ezJnHRljTqUDi93S5dEOPZElnyHSMJY:J6vmlX/oxlHqUDixS5dEOkTMJ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

MITRE ATT&CK Enterprise v15

Tasks