General

  • Target

    9d873ac495f066a7946ef46fa40276d7c639b025139b90343ec9c5518bf010a6

  • Size

    411KB

  • Sample

    250214-llx19s1phr

  • MD5

    fcd45147067fa6a6bdfc9a7fe59a4ef7

  • SHA1

    3d87ce5a741dfdb6ef32bd1f0adabac6bd3267a6

  • SHA256

    9d873ac495f066a7946ef46fa40276d7c639b025139b90343ec9c5518bf010a6

  • SHA512

    4919a9239ef8756b6ba89e44014443b71c16d44a15bb1399cdbe58151da94a0c2c2f115b9426072153b7d0b24ae543a34a2240b201f3ff431e10f1281b0b9249

  • SSDEEP

    6144:OmQDk3/qrGIWKC6/ZiIuudpyZru4D8yoy5txyxR52S2ZYLIaOjxQRTPI+5N7v:u6AGIWh6/ZBuu+1VYUdGTzjLuxKP

Malware Config

Extracted

Family

raccoon

Botnet

d0a4bfbf53b7cfb0f2c36ea3dac687a23a8d514e

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1bFIJe6mzezYRts1ADNHaG0Wi8T1yMIYo

rc4.plain
rc4.plain

Targets

    • Target

      9d873ac495f066a7946ef46fa40276d7c639b025139b90343ec9c5518bf010a6

    • Size

      411KB

    • MD5

      fcd45147067fa6a6bdfc9a7fe59a4ef7

    • SHA1

      3d87ce5a741dfdb6ef32bd1f0adabac6bd3267a6

    • SHA256

      9d873ac495f066a7946ef46fa40276d7c639b025139b90343ec9c5518bf010a6

    • SHA512

      4919a9239ef8756b6ba89e44014443b71c16d44a15bb1399cdbe58151da94a0c2c2f115b9426072153b7d0b24ae543a34a2240b201f3ff431e10f1281b0b9249

    • SSDEEP

      6144:OmQDk3/qrGIWKC6/ZiIuudpyZru4D8yoy5txyxR52S2ZYLIaOjxQRTPI+5N7v:u6AGIWh6/ZBuu+1VYUdGTzjLuxKP

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks