General

  • Target

    161e393d9f16ea79c1d8356ec926f5bbf11568f5a322f1cd7216bcd12b4d2091

  • Size

    629KB

  • Sample

    240928-p7317azcla

  • MD5

    6719c6922194db548d15e5bb0bfdf04e

  • SHA1

    48b2138bc971c15d2354266d625ed83f630d14ab

  • SHA256

    161e393d9f16ea79c1d8356ec926f5bbf11568f5a322f1cd7216bcd12b4d2091

  • SHA512

    4c360006102945c66827b6b923499cd5c0c59cd850b6e1454d8c431a888a4f28dfdee5d19ee02b3b3e6e956c0513c1e6504f483119e5d1c7c514a696dfb5eb2c

  • SSDEEP

    6144:ptoBfArr5EexYMfSbD4vwvNK64m+dA9fpaGFGdqrSFblLIlvwUWtBbqAAKfyOTkJ:Po2/5ESrADygUy+dA3JidL6OTkJ

Malware Config

Extracted

Family

raccoon

Botnet

336965a455ca2ce533ecd9818b2ffe6a6f83c9af

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1XYuakGFSHHy3LU38pp9VeiZn1ls6D0eR

rc4.plain
rc4.plain

Targets

    • Target

      161e393d9f16ea79c1d8356ec926f5bbf11568f5a322f1cd7216bcd12b4d2091

    • Size

      629KB

    • MD5

      6719c6922194db548d15e5bb0bfdf04e

    • SHA1

      48b2138bc971c15d2354266d625ed83f630d14ab

    • SHA256

      161e393d9f16ea79c1d8356ec926f5bbf11568f5a322f1cd7216bcd12b4d2091

    • SHA512

      4c360006102945c66827b6b923499cd5c0c59cd850b6e1454d8c431a888a4f28dfdee5d19ee02b3b3e6e956c0513c1e6504f483119e5d1c7c514a696dfb5eb2c

    • SSDEEP

      6144:ptoBfArr5EexYMfSbD4vwvNK64m+dA9fpaGFGdqrSFblLIlvwUWtBbqAAKfyOTkJ:Po2/5ESrADygUy+dA3JidL6OTkJ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks