General

  • Target

    622eb151d4c5861e50be9f0eee8d7a28

  • Size

    583KB

  • Sample

    240117-j9n26aced6

  • MD5

    622eb151d4c5861e50be9f0eee8d7a28

  • SHA1

    f0ff2bd70ea0363b7e565a9d49a485838ac02e1f

  • SHA256

    261820cc1782c0c4152398152baeff33ec107f2262693b7d98a007dfa01fb297

  • SHA512

    d384bd94b2438ceb14649285ea2dfb88a1678fec1aed6292cb5761243ac67dc266a102273d5974b2aa13ef39d5a7877e638b11d37ecd8c14c3e7b2912577c4b5

  • SSDEEP

    12288:2LyZz2qjjSQATi0zeH27ZO/Lr3StCfBxp9ptBdC/ySyyQuye:2fOjSQiZODL4Cf/p9pti/y8QI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      622eb151d4c5861e50be9f0eee8d7a28

    • Size

      583KB

    • MD5

      622eb151d4c5861e50be9f0eee8d7a28

    • SHA1

      f0ff2bd70ea0363b7e565a9d49a485838ac02e1f

    • SHA256

      261820cc1782c0c4152398152baeff33ec107f2262693b7d98a007dfa01fb297

    • SHA512

      d384bd94b2438ceb14649285ea2dfb88a1678fec1aed6292cb5761243ac67dc266a102273d5974b2aa13ef39d5a7877e638b11d37ecd8c14c3e7b2912577c4b5

    • SSDEEP

      12288:2LyZz2qjjSQATi0zeH27ZO/Lr3StCfBxp9ptBdC/ySyyQuye:2fOjSQiZODL4Cf/p9pti/y8QI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks