General

  • Target

    edadaf903ccfd5a373cf002b76d6d211ff635e06fcb04b8b0e4ad1833bc84e95.exe

  • Size

    406KB

  • Sample

    250217-b8nq1awlat

  • MD5

    d2db2691cd2418f5d6ade777a9627f3d

  • SHA1

    4a4b55cddeb44914c1c1dc9864aabcf60617387b

  • SHA256

    edadaf903ccfd5a373cf002b76d6d211ff635e06fcb04b8b0e4ad1833bc84e95

  • SHA512

    df0a2d76fd20c863720ed602d47c17925c1483fb5c18a60914f6803905cc28a5831dbf75b5ccef471bf0fb48c41d8868a3fbde74b23507b0a576c24ac34d0d04

  • SSDEEP

    12288:+eCC68kSBNSGhQK3b+910DbEo3fQ6eBZY0lVJgG:Z68X6Gv+0DbEMfQl7rlngG

Malware Config

Extracted

Family

raccoon

Botnet

d0a4bfbf53b7cfb0f2c36ea3dac687a23a8d514e

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1bFIJe6mzezYRts1ADNHaG0Wi8T1yMIYo

rc4.plain
rc4.plain

Targets

    • Target

      edadaf903ccfd5a373cf002b76d6d211ff635e06fcb04b8b0e4ad1833bc84e95.exe

    • Size

      406KB

    • MD5

      d2db2691cd2418f5d6ade777a9627f3d

    • SHA1

      4a4b55cddeb44914c1c1dc9864aabcf60617387b

    • SHA256

      edadaf903ccfd5a373cf002b76d6d211ff635e06fcb04b8b0e4ad1833bc84e95

    • SHA512

      df0a2d76fd20c863720ed602d47c17925c1483fb5c18a60914f6803905cc28a5831dbf75b5ccef471bf0fb48c41d8868a3fbde74b23507b0a576c24ac34d0d04

    • SSDEEP

      12288:+eCC68kSBNSGhQK3b+910DbEo3fQ6eBZY0lVJgG:Z68X6Gv+0DbEMfQl7rlngG

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Downloads MZ/PE file

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks