General

  • Target

    cbba8d8f2addd8e8c8fdb6d0e84daa90N.exe

  • Size

    534KB

  • Sample

    240826-ptxl9avglq

  • MD5

    cbba8d8f2addd8e8c8fdb6d0e84daa90

  • SHA1

    6cdb4fb697d776251f22c6f7d9404d7b1a6ed733

  • SHA256

    ff0f17b2d53553f4043579fd6a7c41765bd8e6fc0bd6e90b869582e7df2233a5

  • SHA512

    f182c7c66f8271f877c2a44f5bb007e6adf5e18876b13487b148b6ac776c18d18afd6b1a3f91f9e2467dbf8dc565a7cff273f0e9ee27ac493348956e9b43afcc

  • SSDEEP

    12288:OCbqLsbMPaVICFnxOY0To5NpNaN28yap0OEZEEl187dpN:vWoNGCFA4PNWpJMEp5

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

50f8ded12c46443e43915127b1219ac2fc439bb6

Attributes
  • url4cnc

    https://tttttt.me/mimimimaxormin

rc4.plain
rc4.plain

Targets

    • Target

      cbba8d8f2addd8e8c8fdb6d0e84daa90N.exe

    • Size

      534KB

    • MD5

      cbba8d8f2addd8e8c8fdb6d0e84daa90

    • SHA1

      6cdb4fb697d776251f22c6f7d9404d7b1a6ed733

    • SHA256

      ff0f17b2d53553f4043579fd6a7c41765bd8e6fc0bd6e90b869582e7df2233a5

    • SHA512

      f182c7c66f8271f877c2a44f5bb007e6adf5e18876b13487b148b6ac776c18d18afd6b1a3f91f9e2467dbf8dc565a7cff273f0e9ee27ac493348956e9b43afcc

    • SSDEEP

      12288:OCbqLsbMPaVICFnxOY0To5NpNaN28yap0OEZEEl187dpN:vWoNGCFA4PNWpJMEp5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks