General

  • Target

    e81afc975e052d6912d88768020b3430.exe

  • Size

    567KB

  • Sample

    240109-w5h2kagfh6

  • MD5

    e81afc975e052d6912d88768020b3430

  • SHA1

    b738e0044d9b7e77bd88e6e7008426f067a25099

  • SHA256

    8a1d64b1889fa0df80491f3e391b3ec0a446456f396379b763d79d18a0bbf902

  • SHA512

    fd4004dd43b9f14075d30870c45000318c94ace64677adf0d0139839d094452b20de81c197cdcda44e8f5e7b0c48a383cd4f4b1e26ee7ae7493c7fcc6e962326

  • SSDEEP

    12288:Wv3g0MdwtJq92CbK1sT+Z0deIgDkCfMTxf0UxWNUMq9X7z0atpUQ:Wvzw92CbmCeWiC1xlX7z0q

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      e81afc975e052d6912d88768020b3430.exe

    • Size

      567KB

    • MD5

      e81afc975e052d6912d88768020b3430

    • SHA1

      b738e0044d9b7e77bd88e6e7008426f067a25099

    • SHA256

      8a1d64b1889fa0df80491f3e391b3ec0a446456f396379b763d79d18a0bbf902

    • SHA512

      fd4004dd43b9f14075d30870c45000318c94ace64677adf0d0139839d094452b20de81c197cdcda44e8f5e7b0c48a383cd4f4b1e26ee7ae7493c7fcc6e962326

    • SSDEEP

      12288:Wv3g0MdwtJq92CbK1sT+Z0deIgDkCfMTxf0UxWNUMq9X7z0atpUQ:Wvzw92CbmCeWiC1xlX7z0q

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks