General

  • Target

    643e9e405a9cc89e55e0276bdb07637b433a8cc6e161f6682f9c675a8e480894.exe

  • Size

    585KB

  • Sample

    241123-mxvkyszlcp

  • MD5

    82bc820547ea62f3a8c22e3a57b92aea

  • SHA1

    526519d2c37b005fd49d678281cdb083138b1dd2

  • SHA256

    643e9e405a9cc89e55e0276bdb07637b433a8cc6e161f6682f9c675a8e480894

  • SHA512

    8c3271246235f49d42eeed0e247395d7b157095f364162048054bf87d343ac24c9ccad680c4750094f205a82e0c9f82257e3724b7a36576f9a97c0241067c750

  • SSDEEP

    12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8dQ:Ul00+SUdN2ufe6JQmLgRvIoJh

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      643e9e405a9cc89e55e0276bdb07637b433a8cc6e161f6682f9c675a8e480894.exe

    • Size

      585KB

    • MD5

      82bc820547ea62f3a8c22e3a57b92aea

    • SHA1

      526519d2c37b005fd49d678281cdb083138b1dd2

    • SHA256

      643e9e405a9cc89e55e0276bdb07637b433a8cc6e161f6682f9c675a8e480894

    • SHA512

      8c3271246235f49d42eeed0e247395d7b157095f364162048054bf87d343ac24c9ccad680c4750094f205a82e0c9f82257e3724b7a36576f9a97c0241067c750

    • SSDEEP

      12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8dQ:Ul00+SUdN2ufe6JQmLgRvIoJh

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks