General

  • Target

    c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

  • Size

    224KB

  • Sample

    241015-e6l16sygpm

  • MD5

    a1aecec057be3ed2d63092d098a7aac9

  • SHA1

    eaf32613fb087d9ddab2cc1d4728b592e02f22f4

  • SHA256

    c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

  • SHA512

    2c9d80d52c4d51cd1ae63436ba8d45efdaf89ea895cd5d4f707a3dad092c5e46e12ffddb80b47205f91e73691faec385a87438b410e85dc4fe341a7e2ee5c01a

  • SSDEEP

    3072:lJtv4wubF7ZCUzLj4JAeNkhqVAeZmOCCX/qsc51FlLEIpMaD4K1fm:l33g73LjNeNkwAvCX/qP1FR3DJf

Malware Config

Extracted

Family

raccoon

Botnet

4ae4714db45590a437a374db4c08069d

C2

http://80.66.87.23

Attributes
  • user_agent

    TakeMyPainBack

xor.plain

Targets

    • Target

      c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

    • Size

      224KB

    • MD5

      a1aecec057be3ed2d63092d098a7aac9

    • SHA1

      eaf32613fb087d9ddab2cc1d4728b592e02f22f4

    • SHA256

      c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

    • SHA512

      2c9d80d52c4d51cd1ae63436ba8d45efdaf89ea895cd5d4f707a3dad092c5e46e12ffddb80b47205f91e73691faec385a87438b410e85dc4fe341a7e2ee5c01a

    • SSDEEP

      3072:lJtv4wubF7ZCUzLj4JAeNkhqVAeZmOCCX/qsc51FlLEIpMaD4K1fm:l33g73LjNeNkwAvCX/qP1FR3DJf

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

MITRE ATT&CK Enterprise v15

Tasks