General

  • Target

    330440cd48a348c58260aa404f1812bdeda5b59829ff481f115a4bff640fc3ac

  • Size

    484KB

  • Sample

    241007-xn435s1grn

  • MD5

    dd80e7a33b7af71f729689556df41623

  • SHA1

    1154adbeb40f6b4a92b40c19584b9ac33ff33d96

  • SHA256

    330440cd48a348c58260aa404f1812bdeda5b59829ff481f115a4bff640fc3ac

  • SHA512

    17bd04d00e56259c1ce91ffed2b5c8e2495997745f1f152e70a038053410d29e5eab8cba19ffd3fd87a435a9e4df29159a781d2501f20a778e6cfd59c34d7919

  • SSDEEP

    6144:2mLCAW1CZ20+wPc1IPH0EdMhyM3nobHexbR/kctPnCtaskaHReG:2mOAW18l+wPc1l3hYEl/FdgRxeG

Malware Config

Extracted

Family

raccoon

Botnet

5d224fd6c26c50ca4fea125e43d52eff1b8373e6

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1qOwjltN62v2z1O2ar8qbu8ru2QwxaRnr

rc4.plain
rc4.plain

Targets

    • Target

      330440cd48a348c58260aa404f1812bdeda5b59829ff481f115a4bff640fc3ac

    • Size

      484KB

    • MD5

      dd80e7a33b7af71f729689556df41623

    • SHA1

      1154adbeb40f6b4a92b40c19584b9ac33ff33d96

    • SHA256

      330440cd48a348c58260aa404f1812bdeda5b59829ff481f115a4bff640fc3ac

    • SHA512

      17bd04d00e56259c1ce91ffed2b5c8e2495997745f1f152e70a038053410d29e5eab8cba19ffd3fd87a435a9e4df29159a781d2501f20a778e6cfd59c34d7919

    • SSDEEP

      6144:2mLCAW1CZ20+wPc1IPH0EdMhyM3nobHexbR/kctPnCtaskaHReG:2mOAW18l+wPc1l3hYEl/FdgRxeG

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks