Raccoon - MalwareBazaar Bulk Analysis (31 Samples)

Genel Bakış

Raccoon Stealer, MaaS infostealer'dır.

MalwareBazaar İstihbarat Verileri

Hash Örnekleri (İlk 50)

IOC Özeti

• Bu analiz 31 adet benzersiz Raccoon örneğini kapsar.
• Toplam 62 hash IOC kayıt altına alındı.
• Kampanya aktivitesi: 2020-06-30 ile 2023-09-30 arasında tespit edildi.

Raccoon — Malware Profile

Raccoon Stealer credential hırsızı. ProtonVPN gizleme. Telegram C2 destegi. Browser/kripto cüzdan hedef.

Malware Type

Infostealer

Programming Language

C++

C2 Protocol

HTTP

Target Systems

Windows

Also Known As (AKA)

RecordBreaker

Technical Details

C++/C, HTTP/HTTPS C2, SQLite credential extraction (browser login data), browser history/autofill, kripto wallet stealer (Ethereum/Bitcoin), email client stealer, custom stealer panel (PHP), fingerprint (HWID/IP)

Capabilities & Behavior

Tarayıcı Kimlik Bilgileri

Çerez Hırsızlığı

Kripto Cüzdan Çalma

Sistem Bilgisi

Ekran Görüntüsü

FTP/SSH İstemci Şifreleri

E-posta İstemcisi Çalma

Veri Sızıntısı

IOC List (124 indicators)

IOC — Raccoon Copy

# SHA256 da0863c8100f03955cdc4f964d9931c1921e46cc1b9318aebc88dff4cfad4906 # SHA256 ec51dc5571981991d081899b18decaacc5aee8d8891ddb205507ab397366a1e1 # SHA256 da045fcbd63520920626c45655b87da65e0e6cdc26f7bc20dfbfb6f667be9dbf # SHA256 7470133d3007e06a3444978fa8d8fc9961eb153c3cafeefc1ab2da05b9fe2cae # SHA256 e8002fbc4bd5e57fd317fb99e3bb2bc8965e94761e37757aed51f3f21486c0ad # SHA256 a1863d5f70d6f6f41b86c9608d9995b3ba1f19616681851d5c2a2e254d14c9a4 # SHA256 d29dc3449c2f57e59efd78dd51214ae7bbf71da44834f4cec458758de17513b7 # SHA256 4d8668325ade88f0c153c36d4c01c38900fa11408b24bbe6c65429215e36f007 # SHA256 2a3dcbe001c250ee2741d14d5fe2eaec34de0392c476c79206e350ceb3211c9d # SHA256 7d384a7938ea09e11af47e3b69e53fbdd3947838148979f3235d6f14d0bad481 # SHA256 93c8d545ab6398863d53a31eb7759ceca295007a88902c0473aeddaab2e40d87 # SHA256 c91e2df02ad2c8ccadc96054bceee4422382caa62d443e2633a003e4ce5c7476 # SHA256 ec51dc5571981991d081899b18decaacc5aee8d8891ddb205507ab397366a1e1 # SHA256 7470133d3007e06a3444978fa8d8fc9961eb153c3cafeefc1ab2da05b9fe2cae # SHA256 d60d4da2cfe120138a3fde66694b40ae2710cfc2af33cb7810b3a0e9b1663a4f # SHA256 b583d86c4abc6d6ca57bde802b7e9d8143a249aed6a560a4626e79ae13f6209d # SHA256 1599a612187565c699dfe4f10b04f5621ba04ab053ba1284a008706f0c13d5cb # SHA256 7e59452c10d407a0ec3a91d67ef93acdd56b8070f57904fc26656883f12d07d0 # SHA256 a7b25c3995f6bc79c2075efbb0bbdbcc0a3cc7fccb920b6c760981cd866ed89a # SHA256 2ef11e6ae721f24e08cdd1094f07a4d3ac8c57534217e387c6272a2a5a6fa3f7 # SHA256 5649da2bbced4657c855dcb14c39eb45fffce62b3a947975e63812723bcdcc19 # SHA256 8aa57051e2d9b8d7398e47b5cdabd32df0b28696a32d1d44a8bb6b463b1f3ddb # SHA256 759a3d7922ff0e127eb806a42d923c6cc476e79c6ffe58184dccfea09e2e1615 # SHA256 83ad440cf8c2cdd99ec8b184590fe0e9138cccd686b2136eaddc2cdfcf85aecc # SHA256 d60d4da2cfe120138a3fde66694b40ae2710cfc2af33cb7810b3a0e9b1663a4f # SHA256 688ed165268b4c50264c6f6a0adfa45ebb873705bd61fbe25e3ccd019b2e9e7c # SHA256 b583d86c4abc6d6ca57bde802b7e9d8143a249aed6a560a4626e79ae13f6209d # SHA256 9b51cb350aad96e24406acd943cd90b32bccc06490621fe694301c5cb1de8604 # SHA256 1599a612187565c699dfe4f10b04f5621ba04ab053ba1284a008706f0c13d5cb # SHA256 dd4cedc22c0a03d06a02e0fa290c8d9243e5a369a686f825036f54a5e02a4b9f # SHA256 7e59452c10d407a0ec3a91d67ef93acdd56b8070f57904fc26656883f12d07d0 # SHA256 447c03cc63a420c07875132d35ef027adec98e7bd446cf4f7c9d45b6af40ea2b # SHA256 a7b25c3995f6bc79c2075efbb0bbdbcc0a3cc7fccb920b6c760981cd866ed89a # SHA256 91c43b63ed3549c521e4166ab7358e29ce19f8087c9053a8c6b6e4f17ddeb4c5 # SHA256 2ef11e6ae721f24e08cdd1094f07a4d3ac8c57534217e387c6272a2a5a6fa3f7 # SHA256 78436634a8f469fc338c271932840f9e2555050324c432b3398104784768d61b # SHA256 5649da2bbced4657c855dcb14c39eb45fffce62b3a947975e63812723bcdcc19 # SHA256 df544bca0809572ff2f98f9c004b31f3fc7dbe9d9ee9aef34308c26d73c9742d # SHA256 8aa57051e2d9b8d7398e47b5cdabd32df0b28696a32d1d44a8bb6b463b1f3ddb # SHA256 7162fc57a9bb929d1f6cae90a029127d47af855a684c9af4fc800bf4ba772b76 # SHA256 759a3d7922ff0e127eb806a42d923c6cc476e79c6ffe58184dccfea09e2e1615 # SHA256 84705716d00c9108b15483b01a4f69ae7a113116e44a8f6da17acdc6e51ea8c1 # SHA256 83ad440cf8c2cdd99ec8b184590fe0e9138cccd686b2136eaddc2cdfcf85aecc # SHA256 da0863c8100f03955cdc4f964d9931c1921e46cc1b9318aebc88dff4cfad4906 # SHA256 688ed165268b4c50264c6f6a0adfa45ebb873705bd61fbe25e3ccd019b2e9e7c # SHA256 da045fcbd63520920626c45655b87da65e0e6cdc26f7bc20dfbfb6f667be9dbf # SHA256 9b51cb350aad96e24406acd943cd90b32bccc06490621fe694301c5cb1de8604 # SHA256 e8002fbc4bd5e57fd317fb99e3bb2bc8965e94761e37757aed51f3f21486c0ad # SHA256 dd4cedc22c0a03d06a02e0fa290c8d9243e5a369a686f825036f54a5e02a4b9f # SHA256 a1863d5f70d6f6f41b86c9608d9995b3ba1f19616681851d5c2a2e254d14c9a4 # SHA256 447c03cc63a420c07875132d35ef027adec98e7bd446cf4f7c9d45b6af40ea2b # SHA256 d29dc3449c2f57e59efd78dd51214ae7bbf71da44834f4cec458758de17513b7 # SHA256 91c43b63ed3549c521e4166ab7358e29ce19f8087c9053a8c6b6e4f17ddeb4c5 # SHA256 4d8668325ade88f0c153c36d4c01c38900fa11408b24bbe6c65429215e36f007 # SHA256 78436634a8f469fc338c271932840f9e2555050324c432b3398104784768d61b # SHA256 2a3dcbe001c250ee2741d14d5fe2eaec34de0392c476c79206e350ceb3211c9d # SHA256 df544bca0809572ff2f98f9c004b31f3fc7dbe9d9ee9aef34308c26d73c9742d # SHA256 7d384a7938ea09e11af47e3b69e53fbdd3947838148979f3235d6f14d0bad481 # SHA256 7162fc57a9bb929d1f6cae90a029127d47af855a684c9af4fc800bf4ba772b76 # SHA256 93c8d545ab6398863d53a31eb7759ceca295007a88902c0473aeddaab2e40d87 # SHA256 84705716d00c9108b15483b01a4f69ae7a113116e44a8f6da17acdc6e51ea8c1 # SHA256 c91e2df02ad2c8ccadc96054bceee4422382caa62d443e2633a003e4ce5c7476 # MD5 c6f6ed1f84712740a7ee2faa2e1fff9b # MD5 03956e61a60d13b50142b39ae86daef9 # MD5 477aba0bf9d5c8692432bbac9b503002 # MD5 468b309cd57cd59ddc28e2407ce54a27 # MD5 24ffe0dcd9078d0e8ad4f35cad159f91 # MD5 8353ae9237665633907156980d73fa40 # MD5 e1973f7c9578df9bbb776a4e5d771fac # MD5 404cd7da1d0fa868bb83d82f3b8a0722 # MD5 244e2b33409a9e54f6b1cc980ea663a4 # MD5 809c83f300cd7b8a89b28df242ad1530 # MD5 24f43a2513184cc3ed860813c7312a22 # MD5 8a32ebcb37b57b9a5b7d8280545b11e3 # MD5 39469101f8dbdb37def40c4dd8c51299 # MD5 03956e61a60d13b50142b39ae86daef9 # MD5 468b309cd57cd59ddc28e2407ce54a27 # MD5 8353ae9237665633907156980d73fa40 # MD5 d113b3debc7e0a2da4369dd8d1dbad53 # MD5 a7900cdbb2912d76aa6329c5c41d8609 # MD5 c5e15dbab0811bd42a6e4d62132ff459 # MD5 d8560a7c131d8313f0f95e49e1aa0b73 # MD5 2aeac863392c9a2a31058c6d5eeb4cc2 # MD5 c73c73d159eb50d29c5a8443577d6335 # MD5 f9ae31e86a51f586b9ce160b88d60578 # MD5 9c4cb4328e1059cd2d304c51cf30d13c # MD5 684eb5a98412e8b2e6b753f9ef58a015 # MD5 b1d529ecc680e7b68648b2eaa6e6d0ba # MD5 d113b3debc7e0a2da4369dd8d1dbad53 # MD5 288fd8b98444147b0ca63e14ab234bdb # MD5 a7900cdbb2912d76aa6329c5c41d8609 # MD5 491db1f418cdec340283c2d51aafdf8e # MD5 c5e15dbab0811bd42a6e4d62132ff459 # MD5 859e1182c2ff316f92ec990c18fff2a0 # MD5 d8560a7c131d8313f0f95e49e1aa0b73 # MD5 e2abf4955a35d2f6bfeb21200ea1f836 # MD5 2aeac863392c9a2a31058c6d5eeb4cc2 # MD5 99854fad01d4d709cb0f609463491ddf # MD5 c73c73d159eb50d29c5a8443577d6335 # MD5 76c57e31eba482ee443cc7c797ea3f15 # MD5 f9ae31e86a51f586b9ce160b88d60578 # MD5 66ae3ac92c080265160dd55ad87cd972 # MD5 9c4cb4328e1059cd2d304c51cf30d13c # MD5 7a2733c657c008f1ff873c2d851c1d24 # MD5 684eb5a98412e8b2e6b753f9ef58a015 # MD5 c6f6ed1f84712740a7ee2faa2e1fff9b # MD5 b1d529ecc680e7b68648b2eaa6e6d0ba # MD5 477aba0bf9d5c8692432bbac9b503002 # MD5 288fd8b98444147b0ca63e14ab234bdb # MD5 24ffe0dcd9078d0e8ad4f35cad159f91 # MD5 491db1f418cdec340283c2d51aafdf8e # MD5 e1973f7c9578df9bbb776a4e5d771fac # MD5 859e1182c2ff316f92ec990c18fff2a0 # MD5 404cd7da1d0fa868bb83d82f3b8a0722 # MD5 e2abf4955a35d2f6bfeb21200ea1f836 # MD5 244e2b33409a9e54f6b1cc980ea663a4 # MD5 99854fad01d4d709cb0f609463491ddf # MD5 809c83f300cd7b8a89b28df242ad1530 # MD5 76c57e31eba482ee443cc7c797ea3f15 # MD5 24f43a2513184cc3ed860813c7312a22 # MD5 66ae3ac92c080265160dd55ad87cd972 # MD5 8a32ebcb37b57b9a5b7d8280545b11e3 # MD5 7a2733c657c008f1ff873c2d851c1d24 # MD5 39469101f8dbdb37def40c4dd8c51299

Type	Value	Note
sha256	da0863c8100f03955cdc4f964d9931c1921e46cc1b9318aebc88dff4cfad4906	MB:Raccoon
sha256	ec51dc5571981991d081899b18decaacc5aee8d8891ddb205507ab397366a1e1	MB:Raccoon
sha256	da045fcbd63520920626c45655b87da65e0e6cdc26f7bc20dfbfb6f667be9dbf	MB:Raccoon
sha256	7470133d3007e06a3444978fa8d8fc9961eb153c3cafeefc1ab2da05b9fe2cae	MB:Raccoon
sha256	e8002fbc4bd5e57fd317fb99e3bb2bc8965e94761e37757aed51f3f21486c0ad	MB:Raccoon
sha256	a1863d5f70d6f6f41b86c9608d9995b3ba1f19616681851d5c2a2e254d14c9a4	MB:Raccoon
sha256	d29dc3449c2f57e59efd78dd51214ae7bbf71da44834f4cec458758de17513b7	MB:Raccoon
sha256	4d8668325ade88f0c153c36d4c01c38900fa11408b24bbe6c65429215e36f007	MB:Raccoon
sha256	2a3dcbe001c250ee2741d14d5fe2eaec34de0392c476c79206e350ceb3211c9d	MB:Raccoon
sha256	7d384a7938ea09e11af47e3b69e53fbdd3947838148979f3235d6f14d0bad481	MB:Raccoon
sha256	93c8d545ab6398863d53a31eb7759ceca295007a88902c0473aeddaab2e40d87	MB:Raccoon
sha256	c91e2df02ad2c8ccadc96054bceee4422382caa62d443e2633a003e4ce5c7476	MB:Raccoon
sha256	ec51dc5571981991d081899b18decaacc5aee8d8891ddb205507ab397366a1e1	MB:Raccoon
sha256	7470133d3007e06a3444978fa8d8fc9961eb153c3cafeefc1ab2da05b9fe2cae	MB:Raccoon
sha256	d60d4da2cfe120138a3fde66694b40ae2710cfc2af33cb7810b3a0e9b1663a4f	MB:Raccoon
sha256	b583d86c4abc6d6ca57bde802b7e9d8143a249aed6a560a4626e79ae13f6209d	MB:Raccoon
sha256	1599a612187565c699dfe4f10b04f5621ba04ab053ba1284a008706f0c13d5cb	MB:Raccoon
sha256	7e59452c10d407a0ec3a91d67ef93acdd56b8070f57904fc26656883f12d07d0	MB:Raccoon
sha256	a7b25c3995f6bc79c2075efbb0bbdbcc0a3cc7fccb920b6c760981cd866ed89a	MB:Raccoon
sha256	2ef11e6ae721f24e08cdd1094f07a4d3ac8c57534217e387c6272a2a5a6fa3f7	MB:Raccoon
sha256	5649da2bbced4657c855dcb14c39eb45fffce62b3a947975e63812723bcdcc19	MB:Raccoon
sha256	8aa57051e2d9b8d7398e47b5cdabd32df0b28696a32d1d44a8bb6b463b1f3ddb	MB:Raccoon
sha256	759a3d7922ff0e127eb806a42d923c6cc476e79c6ffe58184dccfea09e2e1615	MB:Raccoon
sha256	83ad440cf8c2cdd99ec8b184590fe0e9138cccd686b2136eaddc2cdfcf85aecc	MB:Raccoon
sha256	d60d4da2cfe120138a3fde66694b40ae2710cfc2af33cb7810b3a0e9b1663a4f	MB:Raccoon
sha256	688ed165268b4c50264c6f6a0adfa45ebb873705bd61fbe25e3ccd019b2e9e7c	MB:Raccoon
sha256	b583d86c4abc6d6ca57bde802b7e9d8143a249aed6a560a4626e79ae13f6209d	MB:Raccoon
sha256	9b51cb350aad96e24406acd943cd90b32bccc06490621fe694301c5cb1de8604	MB:Raccoon
sha256	1599a612187565c699dfe4f10b04f5621ba04ab053ba1284a008706f0c13d5cb	MB:Raccoon
sha256	dd4cedc22c0a03d06a02e0fa290c8d9243e5a369a686f825036f54a5e02a4b9f	MB:Raccoon
sha256	7e59452c10d407a0ec3a91d67ef93acdd56b8070f57904fc26656883f12d07d0	MB:Raccoon
sha256	447c03cc63a420c07875132d35ef027adec98e7bd446cf4f7c9d45b6af40ea2b	MB:Raccoon
sha256	a7b25c3995f6bc79c2075efbb0bbdbcc0a3cc7fccb920b6c760981cd866ed89a	MB:Raccoon
sha256	91c43b63ed3549c521e4166ab7358e29ce19f8087c9053a8c6b6e4f17ddeb4c5	MB:Raccoon
sha256	2ef11e6ae721f24e08cdd1094f07a4d3ac8c57534217e387c6272a2a5a6fa3f7	MB:Raccoon
sha256	78436634a8f469fc338c271932840f9e2555050324c432b3398104784768d61b	MB:Raccoon
sha256	5649da2bbced4657c855dcb14c39eb45fffce62b3a947975e63812723bcdcc19	MB:Raccoon
sha256	df544bca0809572ff2f98f9c004b31f3fc7dbe9d9ee9aef34308c26d73c9742d	MB:Raccoon
sha256	8aa57051e2d9b8d7398e47b5cdabd32df0b28696a32d1d44a8bb6b463b1f3ddb	MB:Raccoon
sha256	7162fc57a9bb929d1f6cae90a029127d47af855a684c9af4fc800bf4ba772b76	MB:Raccoon
sha256	759a3d7922ff0e127eb806a42d923c6cc476e79c6ffe58184dccfea09e2e1615	MB:Raccoon
sha256	84705716d00c9108b15483b01a4f69ae7a113116e44a8f6da17acdc6e51ea8c1	MB:Raccoon
sha256	83ad440cf8c2cdd99ec8b184590fe0e9138cccd686b2136eaddc2cdfcf85aecc	MB:Raccoon
sha256	da0863c8100f03955cdc4f964d9931c1921e46cc1b9318aebc88dff4cfad4906	MB:Raccoon
sha256	688ed165268b4c50264c6f6a0adfa45ebb873705bd61fbe25e3ccd019b2e9e7c	MB:Raccoon
sha256	da045fcbd63520920626c45655b87da65e0e6cdc26f7bc20dfbfb6f667be9dbf	MB:Raccoon
sha256	9b51cb350aad96e24406acd943cd90b32bccc06490621fe694301c5cb1de8604	MB:Raccoon
sha256	e8002fbc4bd5e57fd317fb99e3bb2bc8965e94761e37757aed51f3f21486c0ad	MB:Raccoon
sha256	dd4cedc22c0a03d06a02e0fa290c8d9243e5a369a686f825036f54a5e02a4b9f	MB:Raccoon
sha256	a1863d5f70d6f6f41b86c9608d9995b3ba1f19616681851d5c2a2e254d14c9a4	MB:Raccoon
sha256	447c03cc63a420c07875132d35ef027adec98e7bd446cf4f7c9d45b6af40ea2b	MB:Raccoon
sha256	d29dc3449c2f57e59efd78dd51214ae7bbf71da44834f4cec458758de17513b7	MB:Raccoon
sha256	91c43b63ed3549c521e4166ab7358e29ce19f8087c9053a8c6b6e4f17ddeb4c5	MB:Raccoon
sha256	4d8668325ade88f0c153c36d4c01c38900fa11408b24bbe6c65429215e36f007	MB:Raccoon
sha256	78436634a8f469fc338c271932840f9e2555050324c432b3398104784768d61b	MB:Raccoon
sha256	2a3dcbe001c250ee2741d14d5fe2eaec34de0392c476c79206e350ceb3211c9d	MB:Raccoon
sha256	df544bca0809572ff2f98f9c004b31f3fc7dbe9d9ee9aef34308c26d73c9742d	MB:Raccoon
sha256	7d384a7938ea09e11af47e3b69e53fbdd3947838148979f3235d6f14d0bad481	MB:Raccoon
sha256	7162fc57a9bb929d1f6cae90a029127d47af855a684c9af4fc800bf4ba772b76	MB:Raccoon
sha256	93c8d545ab6398863d53a31eb7759ceca295007a88902c0473aeddaab2e40d87	MB:Raccoon
sha256	84705716d00c9108b15483b01a4f69ae7a113116e44a8f6da17acdc6e51ea8c1	MB:Raccoon
sha256	c91e2df02ad2c8ccadc96054bceee4422382caa62d443e2633a003e4ce5c7476	MB:Raccoon
md5	c6f6ed1f84712740a7ee2faa2e1fff9b	MB:Raccoon
md5	03956e61a60d13b50142b39ae86daef9	MB:Raccoon
md5	477aba0bf9d5c8692432bbac9b503002	MB:Raccoon
md5	468b309cd57cd59ddc28e2407ce54a27	MB:Raccoon
md5	24ffe0dcd9078d0e8ad4f35cad159f91	MB:Raccoon
md5	8353ae9237665633907156980d73fa40	MB:Raccoon
md5	e1973f7c9578df9bbb776a4e5d771fac	MB:Raccoon
md5	404cd7da1d0fa868bb83d82f3b8a0722	MB:Raccoon
md5	244e2b33409a9e54f6b1cc980ea663a4	MB:Raccoon
md5	809c83f300cd7b8a89b28df242ad1530	MB:Raccoon
md5	24f43a2513184cc3ed860813c7312a22	MB:Raccoon
md5	8a32ebcb37b57b9a5b7d8280545b11e3	MB:Raccoon
md5	39469101f8dbdb37def40c4dd8c51299	MB:Raccoon
md5	03956e61a60d13b50142b39ae86daef9	MB:Raccoon
md5	468b309cd57cd59ddc28e2407ce54a27	MB:Raccoon
md5	8353ae9237665633907156980d73fa40	MB:Raccoon
md5	d113b3debc7e0a2da4369dd8d1dbad53	MB:Raccoon
md5	a7900cdbb2912d76aa6329c5c41d8609	MB:Raccoon
md5	c5e15dbab0811bd42a6e4d62132ff459	MB:Raccoon
md5	d8560a7c131d8313f0f95e49e1aa0b73	MB:Raccoon
md5	2aeac863392c9a2a31058c6d5eeb4cc2	MB:Raccoon
md5	c73c73d159eb50d29c5a8443577d6335	MB:Raccoon
md5	f9ae31e86a51f586b9ce160b88d60578	MB:Raccoon
md5	9c4cb4328e1059cd2d304c51cf30d13c	MB:Raccoon
md5	684eb5a98412e8b2e6b753f9ef58a015	MB:Raccoon
md5	b1d529ecc680e7b68648b2eaa6e6d0ba	MB:Raccoon
md5	d113b3debc7e0a2da4369dd8d1dbad53	MB:Raccoon
md5	288fd8b98444147b0ca63e14ab234bdb	MB:Raccoon
md5	a7900cdbb2912d76aa6329c5c41d8609	MB:Raccoon
md5	491db1f418cdec340283c2d51aafdf8e	MB:Raccoon
md5	c5e15dbab0811bd42a6e4d62132ff459	MB:Raccoon
md5	859e1182c2ff316f92ec990c18fff2a0	MB:Raccoon
md5	d8560a7c131d8313f0f95e49e1aa0b73	MB:Raccoon
md5	e2abf4955a35d2f6bfeb21200ea1f836	MB:Raccoon
md5	2aeac863392c9a2a31058c6d5eeb4cc2	MB:Raccoon
md5	99854fad01d4d709cb0f609463491ddf	MB:Raccoon
md5	c73c73d159eb50d29c5a8443577d6335	MB:Raccoon
md5	76c57e31eba482ee443cc7c797ea3f15	MB:Raccoon
md5	f9ae31e86a51f586b9ce160b88d60578	MB:Raccoon
md5	66ae3ac92c080265160dd55ad87cd972	MB:Raccoon
md5	9c4cb4328e1059cd2d304c51cf30d13c	MB:Raccoon
md5	7a2733c657c008f1ff873c2d851c1d24	MB:Raccoon
md5	684eb5a98412e8b2e6b753f9ef58a015	MB:Raccoon
md5	c6f6ed1f84712740a7ee2faa2e1fff9b	MB:Raccoon
md5	b1d529ecc680e7b68648b2eaa6e6d0ba	MB:Raccoon
md5	477aba0bf9d5c8692432bbac9b503002	MB:Raccoon
md5	288fd8b98444147b0ca63e14ab234bdb	MB:Raccoon
md5	24ffe0dcd9078d0e8ad4f35cad159f91	MB:Raccoon
md5	491db1f418cdec340283c2d51aafdf8e	MB:Raccoon
md5	e1973f7c9578df9bbb776a4e5d771fac	MB:Raccoon
md5	859e1182c2ff316f92ec990c18fff2a0	MB:Raccoon
md5	404cd7da1d0fa868bb83d82f3b8a0722	MB:Raccoon
md5	e2abf4955a35d2f6bfeb21200ea1f836	MB:Raccoon
md5	244e2b33409a9e54f6b1cc980ea663a4	MB:Raccoon
md5	99854fad01d4d709cb0f609463491ddf	MB:Raccoon
md5	809c83f300cd7b8a89b28df242ad1530	MB:Raccoon
md5	76c57e31eba482ee443cc7c797ea3f15	MB:Raccoon
md5	24f43a2513184cc3ed860813c7312a22	MB:Raccoon
md5	66ae3ac92c080265160dd55ad87cd972	MB:Raccoon
md5	8a32ebcb37b57b9a5b7d8280545b11e3	MB:Raccoon
md5	7a2733c657c008f1ff873c2d851c1d24	MB:Raccoon
md5	39469101f8dbdb37def40c4dd8c51299	MB:Raccoon

C2 Servers (7 recorded servers for this family)

Address	Type	Port	Protocol	Status	Country
arena.cc	domain	—	HTTP	active	—
cacerts.digicert.com	domain	—	HTTP	active	—
crl3.digicert.com	domain	—	HTTP	active	—
crl.globalsign.com	domain	—	HTTP	active	—
45.139.199.83	ip	443	HTTPS	inactive	RU
coded_stream.cc	domain	—	HTTP	inactive	—
92.255.57.48	ip	80	HTTP	sinkholed	UA

C2 addresses are provided only from malware samples manually verified by the KEYDAL team. Commercial use is prohibited.