General

  • Target
    3f0d621f5784ae2bb0a398d078b67035c4c64bb7bc518a949229523436e23ce6N.exe
  • Size 469KB
  • Sample250116-phr8dszmez
  • SHA256 3f0d621f5784ae2bb0a398d078b67035c4c64bb7bc518a949229523436e23ce6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • raccoon

Botnet
  • faea3ab5ea06a40f0cc8f655e526972689ca1b1f

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1QQXAXArU8BU4kJZ6IBsSCCyLtmLftiOV

rc4.plain
rc4.plain

Targets

    • Target
      3f0d621f5784ae2bb0a398d078b67035c4c64bb7bc518a949229523436e23ce6N.exe
    • Size 469KB
    • SHA256 3f0d621f5784ae2bb0a398d078b67035c4c64bb7bc518a949229523436e23ce6
    • MD5 SHA1 SHA512 SSDEEP
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks