General

  • Target

    05eddc776cf66bc1b8743caf684d2b6d0814ce83c73ca7abe5408d4807b60d7b.exe

  • Size

    566KB

  • Sample

    241123-ccv1wavncw

  • MD5

    d5632e9787294bde814ce198e6ed4f4a

  • SHA1

    efdd0130558897f8c285da79ec5c1c4a469738a8

  • SHA256

    05eddc776cf66bc1b8743caf684d2b6d0814ce83c73ca7abe5408d4807b60d7b

  • SHA512

    478aa9cd59eba870a0eabec4291c9430275ea3a956ca31ed83faf6d011f49a07933e8336e258e8cfeac37b30d6289112113e15402626d1d5a0e9bcd18f2df4c8

  • SSDEEP

    12288:UlCiAE3ZDyLochghL/Zo4OvBjFAtCDj7aoXyP3KZKX9:UlCiAWNyLoighbiBZCojCvK0N

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      05eddc776cf66bc1b8743caf684d2b6d0814ce83c73ca7abe5408d4807b60d7b.exe

    • Size

      566KB

    • MD5

      d5632e9787294bde814ce198e6ed4f4a

    • SHA1

      efdd0130558897f8c285da79ec5c1c4a469738a8

    • SHA256

      05eddc776cf66bc1b8743caf684d2b6d0814ce83c73ca7abe5408d4807b60d7b

    • SHA512

      478aa9cd59eba870a0eabec4291c9430275ea3a956ca31ed83faf6d011f49a07933e8336e258e8cfeac37b30d6289112113e15402626d1d5a0e9bcd18f2df4c8

    • SSDEEP

      12288:UlCiAE3ZDyLochghL/Zo4OvBjFAtCDj7aoXyP3KZKX9:UlCiAWNyLoighbiBZCojCvK0N

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks