General

  • Target

    2025-03-20_a6ee68a3af1a97be5140f8bbe8e1951f_amadey_rhadamanthys_sakula_smoke-loader

  • Size

    537KB

  • Sample

    250320-qsrv2stwcx

  • MD5

    a6ee68a3af1a97be5140f8bbe8e1951f

  • SHA1

    ab464d5c1b4805ba26b9aabdd4befca1c7638ce7

  • SHA256

    4eb1537b1b1fac89e3a5b1c40b80500a6385e3a3601ec903971d88fa00740232

  • SHA512

    1030706251ab9b806dd52e5d012e3daeaaab707465dafca0fb2382ae2d0a69764361b0904da36dea9df855f5f6563dd6233f9a5f68b490e141307915e24938b9

  • SSDEEP

    6144:Vel/lJDNV7o6kIhrse2oHb9/SWGkI/MXYmNsdpjL0Dba9hO5EbDM0/:MZD7bkIB5kjM/sEoO5EbDt

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

e593428d572f64087cbbaacf2f970ff1f26a86b7

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      2025-03-20_a6ee68a3af1a97be5140f8bbe8e1951f_amadey_rhadamanthys_sakula_smoke-loader

    • Size

      537KB

    • MD5

      a6ee68a3af1a97be5140f8bbe8e1951f

    • SHA1

      ab464d5c1b4805ba26b9aabdd4befca1c7638ce7

    • SHA256

      4eb1537b1b1fac89e3a5b1c40b80500a6385e3a3601ec903971d88fa00740232

    • SHA512

      1030706251ab9b806dd52e5d012e3daeaaab707465dafca0fb2382ae2d0a69764361b0904da36dea9df855f5f6563dd6233f9a5f68b490e141307915e24938b9

    • SSDEEP

      6144:Vel/lJDNV7o6kIhrse2oHb9/SWGkI/MXYmNsdpjL0Dba9hO5EbDM0/:MZD7bkIB5kjM/sEoO5EbDt

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks