General
- Target 2026-07-12_7ea5f973b753bf20f0bab3d957192c01_amadey_avoslocker_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_raccoonstealer
- Size 572KB
- Sample260712-k4yj3sft4n
- SHA256 1a0c31de410a91b71133bbbca474338de7b669979741384d6c162f2a12ad4835
- MD5 7ea5f973b753bf20f0bab3d957192c01
- SHA1 beb2647e377b722ccc0561d735b2b89d7c1e39d4
- SHA512 0445325ddc3728076ba0c21e1d9599d6fab27261d4419088d0f29cefa084b8f105b2ab7551cdc81a8adf6c67f2e40ce98aae0fb50dd90fa2712cc7a861c555d2
- SSDEEP 12288:HrRa+zvyhlLPWmHmFi0CX4zSrBMUcEHhgEzx9juwL5FsDdTmkimswAQC:Hr84yhl6mGFhE4zJWVGm/uAQC
- TLSH T1C2C4BE2375718036F17240B09E68A7A106BEFC7049648D9B73CA4A2E5FF15D2DB21B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_7ea5f973b753bf20f0bab3d957192c01_amadey_avoslocker_cobalt-strike_darkgate_elex_luca-steal.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_7ea5f973b753bf20f0bab3d957192c01_amadey_avoslocker_cobalt-strike_darkgate_elex_luca-steal.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Botnet
-
236c7f8a01d741b888dc6b6209805e66d41e62ba
Attributes
-
url4cnc
https://telete.in/brikitiki
rc4.plain
rc4.plain
Targets
-
- Target 2026-07-12_7ea5f973b753bf20f0bab3d957192c01_amadey_avoslocker_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat_raccoonstealer
- Size 572KB
- SHA256 1a0c31de410a91b71133bbbca474338de7b669979741384d6c162f2a12ad4835
- MD5 7ea5f973b753bf20f0bab3d957192c01
- SHA1 beb2647e377b722ccc0561d735b2b89d7c1e39d4
- SHA512 0445325ddc3728076ba0c21e1d9599d6fab27261d4419088d0f29cefa084b8f105b2ab7551cdc81a8adf6c67f2e40ce98aae0fb50dd90fa2712cc7a861c555d2
- SSDEEP 12288:HrRa+zvyhlLPWmHmFi0CX4zSrBMUcEHhgEzx9juwL5FsDdTmkimswAQC:Hr84yhl6mGFhE4zJWVGm/uAQC
- TLSH T1C2C4BE2375718036F17240B09E68A7A106BEFC7049648D9B73CA4A2E5FF15D2DB21B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Raccoon Stealer V1 payload
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables referencing many email and collaboration clients. Observed in information steale