General

  • Target

    253f7e52504120823ce8aee26d8947838ef3cf236e4c0c8d0ed6dc2abea03744

  • Size

    513KB

  • Sample

    240826-yn17xstgmm

  • MD5

    4c7e4c18ff36db58ae07ad4e9a440254

  • SHA1

    f4a70b79052a40f5ec5e5462ede254ec9bd65faa

  • SHA256

    253f7e52504120823ce8aee26d8947838ef3cf236e4c0c8d0ed6dc2abea03744

  • SHA512

    b3cb9dad23ada259f7bd7c161011d35e7912d54ff5b82790d44c12f29b899d460e0c4b1300dd94b9c136d52d29d9d781d64cf9b9d41403b551a8120c9ba79bad

  • SSDEEP

    12288:bxnAbkAw5bO0vdJxxYh/AIOQKsIb/mRyazLhm2ld:bxAbkJNOqfxYx2AICRyCLz

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

6133845276bacfd61da17e544c411895bc725640

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      253f7e52504120823ce8aee26d8947838ef3cf236e4c0c8d0ed6dc2abea03744

    • Size

      513KB

    • MD5

      4c7e4c18ff36db58ae07ad4e9a440254

    • SHA1

      f4a70b79052a40f5ec5e5462ede254ec9bd65faa

    • SHA256

      253f7e52504120823ce8aee26d8947838ef3cf236e4c0c8d0ed6dc2abea03744

    • SHA512

      b3cb9dad23ada259f7bd7c161011d35e7912d54ff5b82790d44c12f29b899d460e0c4b1300dd94b9c136d52d29d9d781d64cf9b9d41403b551a8120c9ba79bad

    • SSDEEP

      12288:bxnAbkAw5bO0vdJxxYh/AIOQKsIb/mRyazLhm2ld:bxAbkJNOqfxYx2AICRyCLz

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks