General

  • Target
    2026-09-30_7e2ce94600ecf0c8e73aa31b292fa601_amadey_elex_rhadamanthys_smoke-loader_stop
  • Size 527KB
  • Sample260930-l68y9syepc
  • SHA256 0915217f01052ac6240cf3656931da818b2dc984e5842c4cda668124dac93374
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.1

Botnet
  • 3a0693aace391ad57b292defd202847793de4c76

Attributes
  • url4cnc

    https://telete.in/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target
      2026-09-30_7e2ce94600ecf0c8e73aa31b292fa601_amadey_elex_rhadamanthys_smoke-loader_stop
    • Size 527KB
    • SHA256 0915217f01052ac6240cf3656931da818b2dc984e5842c4cda668124dac93374
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Detects executables referencing many email and collaboration clients. Observed in information steale

MITRE ATT&CK Enterprise v16

Tasks