General

  • Target

    e14e3ba37274e5efe932d789e8e24e20c7c21ad852978df80bb9392f5acf238e

  • Size

    548KB

  • Sample

    240906-hfd5essand

  • MD5

    c5af0e9033ad152595f2c8988591d02d

  • SHA1

    67f1f51f7127f394a40603e9d862f3b3d5f64427

  • SHA256

    e14e3ba37274e5efe932d789e8e24e20c7c21ad852978df80bb9392f5acf238e

  • SHA512

    6f545f7c92a445b931f6ff6eb4773733c3520aaf625b25f165801b00e17833dbe445fc263f283e4833eb3c18949f760d7c8a521f5d46a933f409aa7dd93dc6fc

  • SSDEEP

    12288:IyYFmZpQLI0rais2DlDKr5XPX6oG+46UjpVER:IyW9sKPsrBX6r+4LY

Malware Config

Extracted

Family

raccoon

Botnet

4b8853263bfbfde368561fd97dd96c93b6b91e4f

Attributes
  • url4cnc

    http://194.180.191.241/capibar

    http://103.155.93.35/capibar

    https://t.me/capibar

rc4.plain
rc4.plain

Targets

    • Target

      e14e3ba37274e5efe932d789e8e24e20c7c21ad852978df80bb9392f5acf238e

    • Size

      548KB

    • MD5

      c5af0e9033ad152595f2c8988591d02d

    • SHA1

      67f1f51f7127f394a40603e9d862f3b3d5f64427

    • SHA256

      e14e3ba37274e5efe932d789e8e24e20c7c21ad852978df80bb9392f5acf238e

    • SHA512

      6f545f7c92a445b931f6ff6eb4773733c3520aaf625b25f165801b00e17833dbe445fc263f283e4833eb3c18949f760d7c8a521f5d46a933f409aa7dd93dc6fc

    • SSDEEP

      12288:IyYFmZpQLI0rais2DlDKr5XPX6oG+46UjpVER:IyW9sKPsrBX6r+4LY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks