General

  • Target

    1e080fecb40b5db230f28a9b6248f9e70e0c25565c51a4776272ad6d7eb90bdf

  • Size

    631KB

  • Sample

    240928-qdf51azekb

  • MD5

    0aa0c662eee54f3bbdf0ecea2b4dc2fd

  • SHA1

    0f89f3c30c29fe2aea73060f79fe479c29a1d943

  • SHA256

    1e080fecb40b5db230f28a9b6248f9e70e0c25565c51a4776272ad6d7eb90bdf

  • SHA512

    0a38067abc34e65ea801b3e9c9a209fff93b42db91896e59b47ff573803edef508d4ba06b7828934679cdc0df0700edbb72e6f88ff497572f59e5af73f9069bf

  • SSDEEP

    12288:pBWqJhXAIbp/rLXT5oKaloBHXI2fjjzJBAxRx1cHD4K:3WqJJAe1aloB4IPcRx1H

Malware Config

Extracted

Family

raccoon

Botnet

270ed6774bfe19220ed8e893bc7a752ef50727e6

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1QQXAXArU8BU4kJZ6IBsSCCyLtmLftiOV

rc4.plain
rc4.plain

Targets

    • Target

      1e080fecb40b5db230f28a9b6248f9e70e0c25565c51a4776272ad6d7eb90bdf

    • Size

      631KB

    • MD5

      0aa0c662eee54f3bbdf0ecea2b4dc2fd

    • SHA1

      0f89f3c30c29fe2aea73060f79fe479c29a1d943

    • SHA256

      1e080fecb40b5db230f28a9b6248f9e70e0c25565c51a4776272ad6d7eb90bdf

    • SHA512

      0a38067abc34e65ea801b3e9c9a209fff93b42db91896e59b47ff573803edef508d4ba06b7828934679cdc0df0700edbb72e6f88ff497572f59e5af73f9069bf

    • SSDEEP

      12288:pBWqJhXAIbp/rLXT5oKaloBHXI2fjjzJBAxRx1cHD4K:3WqJJAe1aloB4IPcRx1H

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks