General

  • Target

    12e524a50769755e8432d4163080b6e58e2966f09ccc753eddf5a6dd3c1220beN.exe

  • Size

    526KB

  • Sample

    250110-1pjqdayqcx

  • MD5

    6a586700406c241e3a2c848602887d40

  • SHA1

    96a0438862c34a9cd55753980fc4c5a025ced0f9

  • SHA256

    12e524a50769755e8432d4163080b6e58e2966f09ccc753eddf5a6dd3c1220be

  • SHA512

    fe7e6906f172cb319ad172341153b58cba3a5bd9fe00515c9cb382ce6e7e2443a8aaf887bd7d4e7bca7ab0db0a07b24eec382d10c531480f06641798d15acdd2

  • SSDEEP

    12288:+nvTIHIhemwLoH0i6oAxxEU47y73xLUoRB:8KqemXHJ6hxEbYY6B

Malware Config

Extracted

Family

raccoon

Botnet

284afed1ba08a8b7058c820fea5bc8119c8f5c4a

Attributes
  • url4cnc

    http://103.155.93.247/nixsmasterbaks2

    https://t.me/nixsmasterbaks2

rc4.plain
rc4.plain

Targets

    • Target

      12e524a50769755e8432d4163080b6e58e2966f09ccc753eddf5a6dd3c1220beN.exe

    • Size

      526KB

    • MD5

      6a586700406c241e3a2c848602887d40

    • SHA1

      96a0438862c34a9cd55753980fc4c5a025ced0f9

    • SHA256

      12e524a50769755e8432d4163080b6e58e2966f09ccc753eddf5a6dd3c1220be

    • SHA512

      fe7e6906f172cb319ad172341153b58cba3a5bd9fe00515c9cb382ce6e7e2443a8aaf887bd7d4e7bca7ab0db0a07b24eec382d10c531480f06641798d15acdd2

    • SSDEEP

      12288:+nvTIHIhemwLoH0i6oAxxEU47y73xLUoRB:8KqemXHJ6hxEbYY6B

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks