General

  • Target

    9bcf985e6ccc2cd757ffe75de8ffc858

  • Size

    587KB

  • Sample

    231227-b6z19afbdr

  • MD5

    9bcf985e6ccc2cd757ffe75de8ffc858

  • SHA1

    18eec73533cc465bac6c2c304862a5f098eb004c

  • SHA256

    a20324349d1991711a2406feaf776ad5fcf2679803f67ceed8139f37d2ec796b

  • SHA512

    774394d60fa9b82f2fc8b059014b4039160472aa6fb858e80cd4e892b6d7634421d741a3edca3ac1bd3d8211947a0353a6b36a75df5cdd124ff66da90ec3b6bb

  • SSDEEP

    12288:bC78cApQTXXO08uN117CMWul6/vgXvJgG9yUk7iFX/kzI49To622:briXXO0culBXNyUk7o/8522

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

b5998c5938c0648ce1e41086dc9f3e22ac1750bd

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target

      9bcf985e6ccc2cd757ffe75de8ffc858

    • Size

      587KB

    • MD5

      9bcf985e6ccc2cd757ffe75de8ffc858

    • SHA1

      18eec73533cc465bac6c2c304862a5f098eb004c

    • SHA256

      a20324349d1991711a2406feaf776ad5fcf2679803f67ceed8139f37d2ec796b

    • SHA512

      774394d60fa9b82f2fc8b059014b4039160472aa6fb858e80cd4e892b6d7634421d741a3edca3ac1bd3d8211947a0353a6b36a75df5cdd124ff66da90ec3b6bb

    • SSDEEP

      12288:bC78cApQTXXO08uN117CMWul6/vgXvJgG9yUk7iFX/kzI49To622:briXXO0culBXNyUk7o/8522

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks