General

  • Target

    2a94b939441a73dcd92f145ed48ee78a5442de8aacc5a0dfa3f8645ffc4891fa.exe

  • Size

    512KB

  • Sample

    241124-f1hl8sskar

  • MD5

    49370cf3dce1f5e7cc918a8c406bdd98

  • SHA1

    a8d33108e94c593953468167e449a325e734ef23

  • SHA256

    2a94b939441a73dcd92f145ed48ee78a5442de8aacc5a0dfa3f8645ffc4891fa

  • SHA512

    b9b492044a482803b7d6351f69f71e3aac8f76a61b6773b8323b2520fff7d31a112c9cd39cd3635f2e05b8186dfa66ee2c2a3eb766e5d6428b8663d36a49347b

  • SSDEEP

    6144:nydl2g9K7regCUSifuZYYrXxuwPn6PTQ096NLAdr3uuJ5hWtENnIADG8elO:nUl2gc6UOZYYrgwPncQ0kEdr3uuGGxDX

Malware Config

Extracted

Family

raccoon

Botnet

ac738e6383a48d6a74aeab7c52ebcd50f76032ee

Attributes
  • url4cnc

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      2a94b939441a73dcd92f145ed48ee78a5442de8aacc5a0dfa3f8645ffc4891fa.exe

    • Size

      512KB

    • MD5

      49370cf3dce1f5e7cc918a8c406bdd98

    • SHA1

      a8d33108e94c593953468167e449a325e734ef23

    • SHA256

      2a94b939441a73dcd92f145ed48ee78a5442de8aacc5a0dfa3f8645ffc4891fa

    • SHA512

      b9b492044a482803b7d6351f69f71e3aac8f76a61b6773b8323b2520fff7d31a112c9cd39cd3635f2e05b8186dfa66ee2c2a3eb766e5d6428b8663d36a49347b

    • SSDEEP

      6144:nydl2g9K7regCUSifuZYYrXxuwPn6PTQ096NLAdr3uuJ5hWtENnIADG8elO:nUl2gc6UOZYYrgwPncQ0kEdr3uuGGxDX

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks