General

  • Target

    788f45ada2b264a9ea458f7d125571b0.zip

  • Size

    449KB

  • Sample

    240901-3c8vvavhqf

  • MD5

    599c017e8fd78f8af864c8e82dc2e5fa

  • SHA1

    d14193e47fde99e222b14db28728430e446425f1

  • SHA256

    a85c2fc35c54dceffc9fc852d137ac719c767e45a967693da54882c9f250413c

  • SHA512

    5388f2daf90a414d6a4bae77550ed104d3cb665f8a06c48b7951bacee6e3b39e9ebef2f07b5df91305b88d2b99d95df6baa8f9ce0790436d52a1d8fbc1f47da9

  • SSDEEP

    12288:e+nP4S+qaK+ISAnvb4AaKUP0HWb01mYIECXG:bnAS+hF5Avhacw0wqF

Malware Config

Extracted

Family

raccoon

Botnet

5249862c20af324bd38c0aae0d5ea8e5ac16674d

Attributes
  • url4cnc

    http://telegatt.top/br33smithyou

    http://telegka.top/br33smithyou

    http://telegin.top/br33smithyou

    https://t.me/br33smithyou

rc4.plain
rc4.plain

Targets

    • Target

      75b40afc06895b53f4a90d06c0b6b0e6b72a2c34883dfd151bfbac51701576c0

    • Size

      539KB

    • MD5

      788f45ada2b264a9ea458f7d125571b0

    • SHA1

      cc7cbce75f3f0c2e9eeb5c16f3b0cb690aa46aad

    • SHA256

      75b40afc06895b53f4a90d06c0b6b0e6b72a2c34883dfd151bfbac51701576c0

    • SHA512

      7151982e5270c10869a1bbeb8329ec884aff1ec46925fe0bbbe07c70c3c279fe41c48fbf56835fece6341db772fdd98b142dab66d0d84e3f70422906d74de181

    • SSDEEP

      12288:cFLz8rA4TmF2Gfhk0AYumXdw/9ZO9gEwZGEX8cA0/M:Sk3TORlAYumXo9ZO9ssEv

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks