General

  • Target

    ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe

  • Size

    512KB

  • Sample

    241122-j7smkatkcm

  • MD5

    2b2f93cf8f133618769ce5ea5cb86c35

  • SHA1

    e8e280789b0b2ca85287cce643245761b82a8e12

  • SHA256

    ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21

  • SHA512

    c4de617dca2e3f840e9c52cf0be11664f844a79d1dfde38d10fbf28dfdc85ae5f0940cfae6ac5826010b860c1364a364181ea5cd07012eb43970f8590be88da0

  • SSDEEP

    12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxDd:gmWDkvf7TnAxaL+9t3

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe

    • Size

      512KB

    • MD5

      2b2f93cf8f133618769ce5ea5cb86c35

    • SHA1

      e8e280789b0b2ca85287cce643245761b82a8e12

    • SHA256

      ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21

    • SHA512

      c4de617dca2e3f840e9c52cf0be11664f844a79d1dfde38d10fbf28dfdc85ae5f0940cfae6ac5826010b860c1364a364181ea5cd07012eb43970f8590be88da0

    • SSDEEP

      12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxDd:gmWDkvf7TnAxaL+9t3

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks