General

  • Target

    2e1616ecd26887d18767375bac84efddee4dcd2ea5af55285181739536d7b6cbN.exe

  • Size

    539KB

  • Sample

    250116-t6cvtsyqbw

  • MD5

    1ea410074c763659a5a760e32f5a07e0

  • SHA1

    c41dbce95218bfaac6c26e72dc2ab26ef95153f9

  • SHA256

    2e1616ecd26887d18767375bac84efddee4dcd2ea5af55285181739536d7b6cb

  • SHA512

    cdf6dfe14d884732df7569242e84818d14f8646bccafb31bc7e69af040d9d6904e401e1d4c76cad5f2f6afdf78cb733cfbc9d878cbd520b2585ea62475c832b5

  • SSDEEP

    12288:1NEBfifG/Rr1lpJBxn3BDAW6YVfFA0GtSuSdeZ1ZfMnXP4qA0H:EP5rpxJr6W7GJyeZ1ZknXP4qA0H

Malware Config

Extracted

Family

raccoon

Botnet

e89531715fcaecf579e6c8b392dce4a0144dc21b

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1QQXAXArU8BU4kJZ6IBsSCCyLtmLftiOV

rc4.plain
rc4.plain

Targets

    • Target

      2e1616ecd26887d18767375bac84efddee4dcd2ea5af55285181739536d7b6cbN.exe

    • Size

      539KB

    • MD5

      1ea410074c763659a5a760e32f5a07e0

    • SHA1

      c41dbce95218bfaac6c26e72dc2ab26ef95153f9

    • SHA256

      2e1616ecd26887d18767375bac84efddee4dcd2ea5af55285181739536d7b6cb

    • SHA512

      cdf6dfe14d884732df7569242e84818d14f8646bccafb31bc7e69af040d9d6904e401e1d4c76cad5f2f6afdf78cb733cfbc9d878cbd520b2585ea62475c832b5

    • SSDEEP

      12288:1NEBfifG/Rr1lpJBxn3BDAW6YVfFA0GtSuSdeZ1ZfMnXP4qA0H:EP5rpxJr6W7GJyeZ1ZknXP4qA0H

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks