General

  • Target
    2026-10-01_2b4980ab00b58da9745b82deb70e4bfd_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
  • Size 441KB
  • Sample261002-v8gr8svs2j
  • SHA256 5669cbcba45d86676a567a0ce17099da3f8ed63736111f4e99530031aec9b8d2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • raccoon

Version
  • 1.8.3-hotfix

Botnet
  • 14b265e74e2847e8408db7ca21fe6fe2e9ab5767

Attributes
  • url4cnc

    http://91.219.236.162/masterdanteloma

    http://185.163.47.176/masterdanteloma

    http://193.38.54.238/masterdanteloma

    http://74.119.192.122/masterdanteloma

    http://91.219.236.240/masterdanteloma

    https://t.me/masterdanteloma

rc4.plain
rc4.plain

Targets

    • Target
      2026-10-01_2b4980ab00b58da9745b82deb70e4bfd_amadey_elex_rhadamanthys_smoke-loader_stealc_tofsee
    • Size 441KB
    • SHA256 5669cbcba45d86676a567a0ce17099da3f8ed63736111f4e99530031aec9b8d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Detects executables referencing many email and collaboration clients. Observed in information steale

MITRE ATT&CK Enterprise v16

Tasks