General

  • Target

    a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d.exe

  • Size

    594KB

  • Sample

    241124-kxlxpssqds

  • MD5

    ebec4dd562078d7c990cb96fc009b61e

  • SHA1

    b07e6b3196b3f14cffde7afcda2c19d45e223b51

  • SHA256

    a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d

  • SHA512

    f53b20245bab943df5d8f8b534fdf7e2c4b02a488d8aa1b458d249a3effec8a878542d46138c7b109ec8023d08ba448f72ec009b8e65d95bd6db957e6b277745

  • SSDEEP

    12288:1XdSQLfW3i7ExfhXbP5fI0G3OXwbVgLz7cE7odJjA0gZrRZo1GI7dj/R5zamDIcQ:1tSY0i7Ex5XbW0G+P7J7CJs04qGm/R58

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d.exe

    • Size

      594KB

    • MD5

      ebec4dd562078d7c990cb96fc009b61e

    • SHA1

      b07e6b3196b3f14cffde7afcda2c19d45e223b51

    • SHA256

      a08c561dc3c10e1bcd583f083e7f747cb0f7dc207f1dda63e99513bd2bb7886d

    • SHA512

      f53b20245bab943df5d8f8b534fdf7e2c4b02a488d8aa1b458d249a3effec8a878542d46138c7b109ec8023d08ba448f72ec009b8e65d95bd6db957e6b277745

    • SSDEEP

      12288:1XdSQLfW3i7ExfhXbP5fI0G3OXwbVgLz7cE7odJjA0gZrRZo1GI7dj/R5zamDIcQ:1tSY0i7Ex5XbW0G+P7J7CJs04qGm/R58

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks