General

  • Target

    0c8bcf14e466afcdb97bc365381c84c9bcbc2e6aec2f21c52fe58c4b4562659d.exe

  • Size

    542KB

  • Sample

    241122-r7xwaaspds

  • MD5

    79f0548bad4356fb2470ca77b333d27a

  • SHA1

    51ede78e800745ab326936aefcd017480d01d3b4

  • SHA256

    0c8bcf14e466afcdb97bc365381c84c9bcbc2e6aec2f21c52fe58c4b4562659d

  • SHA512

    5b536413f8b27ca3287ce816753cd8dde466f8d48785d034c23f0ffb818f313e08b29888b492d09ac0231899ab899c516733adb9139899f43d5d1808ca9fb11d

  • SSDEEP

    12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGJ:93j5K901WfAQOs/9J

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      0c8bcf14e466afcdb97bc365381c84c9bcbc2e6aec2f21c52fe58c4b4562659d.exe

    • Size

      542KB

    • MD5

      79f0548bad4356fb2470ca77b333d27a

    • SHA1

      51ede78e800745ab326936aefcd017480d01d3b4

    • SHA256

      0c8bcf14e466afcdb97bc365381c84c9bcbc2e6aec2f21c52fe58c4b4562659d

    • SHA512

      5b536413f8b27ca3287ce816753cd8dde466f8d48785d034c23f0ffb818f313e08b29888b492d09ac0231899ab899c516733adb9139899f43d5d1808ca9fb11d

    • SSDEEP

      12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGJ:93j5K901WfAQOs/9J

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks