General

  • Target

    000a5351b371aded2fb7194910ee210cb029199eb65a4f755f23a4f904117607

  • Size

    454KB

  • Sample

    240907-zpc26avapl

  • MD5

    a29b233216094ad01ecd5c5405bda21c

  • SHA1

    874b0eab36e5951df9a129ae272c627d661a69a4

  • SHA256

    000a5351b371aded2fb7194910ee210cb029199eb65a4f755f23a4f904117607

  • SHA512

    11365254b7b91b1ea81ce84a4c05ff18b9c60f4e97c32d8c770adc9168798553768ef271ccfca812b8d10e2330fb3c95d8fbcb9a01d61454619483682cdae63e

  • SSDEEP

    12288:XrLO6RAATflzgrXUJNGnZJORHWXdGIyFH8x:3tRJ9MrkJNGLOR2NGIOH8x

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

8d179b9e611eee525425544ee8c6d77360ab7cd9

Attributes
  • url4cnc

    http://teletop.top/agrybirdsgamerept

    http://teleta.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      000a5351b371aded2fb7194910ee210cb029199eb65a4f755f23a4f904117607

    • Size

      454KB

    • MD5

      a29b233216094ad01ecd5c5405bda21c

    • SHA1

      874b0eab36e5951df9a129ae272c627d661a69a4

    • SHA256

      000a5351b371aded2fb7194910ee210cb029199eb65a4f755f23a4f904117607

    • SHA512

      11365254b7b91b1ea81ce84a4c05ff18b9c60f4e97c32d8c770adc9168798553768ef271ccfca812b8d10e2330fb3c95d8fbcb9a01d61454619483682cdae63e

    • SSDEEP

      12288:XrLO6RAATflzgrXUJNGnZJORHWXdGIyFH8x:3tRJ9MrkJNGLOR2NGIOH8x

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks