General

  • Target

    9ca1b42cc5e42908becfeb3e21851fe0

  • Size

    490KB

  • Sample

    231227-cml6qaabh9

  • MD5

    9ca1b42cc5e42908becfeb3e21851fe0

  • SHA1

    b8487fcb1d3d51f3f3cd1f423ae65af5cee22778

  • SHA256

    2df6e62ed9849442af436c06d3d5166a78d81837193c5c1556df4f5e19b6ac65

  • SHA512

    5c9c5fc9783a67e3d7b76dae79e800b4351e720ae7de91cde9ad3989b1918800a502d9c35681110073bdc602ab09358c70a94e689a34b6c278d1622f02242c46

  • SSDEEP

    12288:DNzxydNGmvII/+a7Z1HKA/NGbolYOXWVcT:hcdNGNaZ5K68ElLGVc

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      9ca1b42cc5e42908becfeb3e21851fe0

    • Size

      490KB

    • MD5

      9ca1b42cc5e42908becfeb3e21851fe0

    • SHA1

      b8487fcb1d3d51f3f3cd1f423ae65af5cee22778

    • SHA256

      2df6e62ed9849442af436c06d3d5166a78d81837193c5c1556df4f5e19b6ac65

    • SHA512

      5c9c5fc9783a67e3d7b76dae79e800b4351e720ae7de91cde9ad3989b1918800a502d9c35681110073bdc602ab09358c70a94e689a34b6c278d1622f02242c46

    • SSDEEP

      12288:DNzxydNGmvII/+a7Z1HKA/NGbolYOXWVcT:hcdNGNaZ5K68ElLGVc

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks