General

  • Target

    2df6ae48f978f4153ca7014fda0c43a0N

  • Size

    551KB

  • Sample

    240829-pznxastgqr

  • MD5

    2df6ae48f978f4153ca7014fda0c43a0

  • SHA1

    b01223fd1099e8499ad99a4bdef7dcfb0a87d389

  • SHA256

    70f0c3034b67a141c9871881f44a111b236ca1741518b1a0e82a3b542349109a

  • SHA512

    6bf4bf657633ce27768ce15c8019331eff26bec49912dc52dba735e2a3839979bdce3a0e8fb088a409e1bb134fc96e896308c220abd042a61fb7d113933176bb

  • SSDEEP

    12288:7N8Ijm1RfSdAHdW2MY33E+CddtyIDn2aFGnF2fDusHHS:6IjLdIW2My3CdffHqEuyS

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

e0aa5b6d2491c503baf06d4cfeb218de1cd41474

Attributes
  • url4cnc

    https://tttttt.me/hbackwoods1

rc4.plain
rc4.plain

Targets

    • Target

      2df6ae48f978f4153ca7014fda0c43a0N

    • Size

      551KB

    • MD5

      2df6ae48f978f4153ca7014fda0c43a0

    • SHA1

      b01223fd1099e8499ad99a4bdef7dcfb0a87d389

    • SHA256

      70f0c3034b67a141c9871881f44a111b236ca1741518b1a0e82a3b542349109a

    • SHA512

      6bf4bf657633ce27768ce15c8019331eff26bec49912dc52dba735e2a3839979bdce3a0e8fb088a409e1bb134fc96e896308c220abd042a61fb7d113933176bb

    • SSDEEP

      12288:7N8Ijm1RfSdAHdW2MY33E+CddtyIDn2aFGnF2fDusHHS:6IjLdIW2My3CdffHqEuyS

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks