General

  • Target

    eca544069abeee4f44c2ed570bb08017d1471e456b3eb4e445447e9e2f315d5d

  • Size

    187KB

  • Sample

    241119-m75hxavmaw

  • MD5

    78cdaf7c125a422b3b5485e6a3e29ca1

  • SHA1

    be91343edea134ec012df4ae37a206256da7e55f

  • SHA256

    eca544069abeee4f44c2ed570bb08017d1471e456b3eb4e445447e9e2f315d5d

  • SHA512

    9f733b89ab66c0d3a7a5b55ffeb01b97abe71de76710f95689094eec979dddb48ae66d1b736cc2b882d0af2caf381b0531d1ae6dc0ecb8847dc2d035cea46c54

  • SSDEEP

    3072:oreJudhoUtw+PPenTL6qQ5XbQaVLIK0chyXToi0zFr051Q3I9isz:oQudhoUtoTniXbQaVL2T3krIQEi

Malware Config

Extracted

Family

raccoon

Botnet

c4fd5ed422b9e26dd59a97de04d35e50

C2

http://157.90.161.111:8086/

Attributes
  • user_agent

    SunShineMoonLight

xor.plain

Targets

    • Target

      eca544069abeee4f44c2ed570bb08017d1471e456b3eb4e445447e9e2f315d5d

    • Size

      187KB

    • MD5

      78cdaf7c125a422b3b5485e6a3e29ca1

    • SHA1

      be91343edea134ec012df4ae37a206256da7e55f

    • SHA256

      eca544069abeee4f44c2ed570bb08017d1471e456b3eb4e445447e9e2f315d5d

    • SHA512

      9f733b89ab66c0d3a7a5b55ffeb01b97abe71de76710f95689094eec979dddb48ae66d1b736cc2b882d0af2caf381b0531d1ae6dc0ecb8847dc2d035cea46c54

    • SSDEEP

      3072:oreJudhoUtw+PPenTL6qQ5XbQaVLIK0chyXToi0zFr051Q3I9isz:oQudhoUtoTniXbQaVL2T3krIQEi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks