General

  • Target

    79ecbafd0f4f41b09260d7ace2ff4a83792a64529e9d54b54eed6f4114c44770

  • Size

    726.3MB

  • Sample

    241221-vhgpjstnhk

  • MD5

    b321d3b1d1e1c919d310fbd4e1222307

  • SHA1

    875e35f70c15db8cb4286c5209f560213d680f3d

  • SHA256

    79ecbafd0f4f41b09260d7ace2ff4a83792a64529e9d54b54eed6f4114c44770

  • SHA512

    d2e74c1a640652f38a3d4e9aaed4441f0a6ea54f32a500b3628703a010f0d966ca9cff0fb6289e994b57c225eebfb43f904af24f119a57a3e8d4f9e704f4d17c

  • SSDEEP

    98304:aHx4RroCiEiu9fRWMZ0wgvFhx46uT3eRxWlXpEd7ZVtDObNwBY3XmoIcXojJhe5z:6x4RNdzaFhSz6R8lXQ7NuNwzopothe5z

Malware Config

Extracted

Family

raccoon

Botnet

b3e62a345d90ee80b30dcc988ddc399f

C2

http://51.68.28.231/

http://5.252.118.129/

Attributes
  • user_agent

    x

xor.plain

Targets

    • Target

      79ecbafd0f4f41b09260d7ace2ff4a83792a64529e9d54b54eed6f4114c44770

    • Size

      726.3MB

    • MD5

      b321d3b1d1e1c919d310fbd4e1222307

    • SHA1

      875e35f70c15db8cb4286c5209f560213d680f3d

    • SHA256

      79ecbafd0f4f41b09260d7ace2ff4a83792a64529e9d54b54eed6f4114c44770

    • SHA512

      d2e74c1a640652f38a3d4e9aaed4441f0a6ea54f32a500b3628703a010f0d966ca9cff0fb6289e994b57c225eebfb43f904af24f119a57a3e8d4f9e704f4d17c

    • SSDEEP

      98304:aHx4RroCiEiu9fRWMZ0wgvFhx46uT3eRxWlXpEd7ZVtDObNwBY3XmoIcXojJhe5z:6x4RNdzaFhSz6R8lXQ7NuNwzopothe5z

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks