General

  • Target

    e1731c57ca6b52e189d6c69da39d547e9bca1f453c84365b94437ea2c3dcfcb9.exe

  • Size

    542KB

  • Sample

    241122-2kefja1mbw

  • MD5

    57be5ad371af6b88c22e5698f09f4c0c

  • SHA1

    74d3065a81fb39fb2d3cd1ba7bb3a99275d4ebb7

  • SHA256

    e1731c57ca6b52e189d6c69da39d547e9bca1f453c84365b94437ea2c3dcfcb9

  • SHA512

    1c5bd095b22dd23edc3f4de7358c48a1204dffd88411b231c1c956ee185aec8a877b9977e13e32996244f6666f4a047f153330b742f322840f8ef28b28669a67

  • SSDEEP

    12288:Di7AsbjUib1WzwpkJ9RWNkx4IK1OSdlBJGTA:D1uoi4zw2JrWN+NGKTA

Malware Config

Extracted

Family

raccoon

Botnet

04425bba3d867526c049c14993222a0ca17902a6

Attributes
  • url4cnc

    http://telegatt.top/ogaolittlebro2

    http://telegka.top/ogaolittlebro2

    http://telegin.top/ogaolittlebro2

    https://t.me/ogaolittlebro2

rc4.plain
rc4.plain

Targets

    • Target

      e1731c57ca6b52e189d6c69da39d547e9bca1f453c84365b94437ea2c3dcfcb9.exe

    • Size

      542KB

    • MD5

      57be5ad371af6b88c22e5698f09f4c0c

    • SHA1

      74d3065a81fb39fb2d3cd1ba7bb3a99275d4ebb7

    • SHA256

      e1731c57ca6b52e189d6c69da39d547e9bca1f453c84365b94437ea2c3dcfcb9

    • SHA512

      1c5bd095b22dd23edc3f4de7358c48a1204dffd88411b231c1c956ee185aec8a877b9977e13e32996244f6666f4a047f153330b742f322840f8ef28b28669a67

    • SSDEEP

      12288:Di7AsbjUib1WzwpkJ9RWNkx4IK1OSdlBJGTA:D1uoi4zw2JrWN+NGKTA

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks