General

  • Target
    a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d.exe
  • Size 594KB
  • Sample241124-kv41hasphv
  • SHA256 a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target
      a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d.exe
    • Size 594KB
    • SHA256 a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d
    • MD5 SHA1 SHA512 SSDEEP
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks