General

  • Target
    d399b62581b6f74bc812834094e0f0cf1389cbfa57e31ad7611925b192e7c3a3N.exe
  • Size 533KB
  • Sample250103-mydc3asmcj
  • SHA256 d399b62581b6f74bc812834094e0f0cf1389cbfa57e31ad7611925b192e7c3a3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • raccoon

Botnet
  • 5d224fd6c26c50ca4fea125e43d52eff1b8373e6

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1qOwjltN62v2z1O2ar8qbu8ru2QwxaRnr

rc4.plain
rc4.plain

Targets

    • Target
      d399b62581b6f74bc812834094e0f0cf1389cbfa57e31ad7611925b192e7c3a3N.exe
    • Size 533KB
    • SHA256 d399b62581b6f74bc812834094e0f0cf1389cbfa57e31ad7611925b192e7c3a3
    • MD5 SHA1 SHA512 SSDEEP
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks