General

  • Target

    c69977040ca059321b25aea46525154a

  • Size

    571KB

  • Sample

    231228-fxc8cahdb7

  • MD5

    c69977040ca059321b25aea46525154a

  • SHA1

    46a32d025ea62fe6378b947332e3a1d7b13e0b29

  • SHA256

    fb4ab4c2bf62d13fe0185c1da427fdf5b45b8fef6714266da5f071ca3a6c3c63

  • SHA512

    2b620e9e0623972420e921c83cbb08c3f8cc2ef76adfb72e98a1a5361f19c80f1982f014dfbd0added72699e1f087dbe78bca5217c3e9f61881e8c1b283523bb

  • SSDEEP

    12288:uurelZNq22wSB/N6yz5iB44HdtjnwMi7FpixrNcLwf5Xk:unNq221QJHHnwMih6r55Xk

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      c69977040ca059321b25aea46525154a

    • Size

      571KB

    • MD5

      c69977040ca059321b25aea46525154a

    • SHA1

      46a32d025ea62fe6378b947332e3a1d7b13e0b29

    • SHA256

      fb4ab4c2bf62d13fe0185c1da427fdf5b45b8fef6714266da5f071ca3a6c3c63

    • SHA512

      2b620e9e0623972420e921c83cbb08c3f8cc2ef76adfb72e98a1a5361f19c80f1982f014dfbd0added72699e1f087dbe78bca5217c3e9f61881e8c1b283523bb

    • SSDEEP

      12288:uurelZNq22wSB/N6yz5iB44HdtjnwMi7FpixrNcLwf5Xk:unNq221QJHHnwMih6r55Xk

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks