General

  • Target

    7bfe112db443b1d0b3368ca8caed2051

  • Size

    580KB

  • Sample

    240128-dqkmqsbgcp

  • MD5

    7bfe112db443b1d0b3368ca8caed2051

  • SHA1

    d0f35618a84dda4e88391c80d8b8ff8025ec3a27

  • SHA256

    97f21ba207ce6b13dc6f9007bc6d45724b4b65336a6754f94e09e8021f56e6f2

  • SHA512

    254046b87e168dd05b18df07191961c7ff3e6450d41eedf0578d31f17d278b88262b3b53874afadbc1f7bac3fc8909e823935515264b54f5e2d8fe05f3e4aafc

  • SSDEEP

    12288:ynUOJQh5RZn/GLslaySdNbwBrbHP6cAC9v64zjY//+7kI3E+whiBYjS:ync5RZn/GLslCw5bv6BUvp8/voENhW

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      7bfe112db443b1d0b3368ca8caed2051

    • Size

      580KB

    • MD5

      7bfe112db443b1d0b3368ca8caed2051

    • SHA1

      d0f35618a84dda4e88391c80d8b8ff8025ec3a27

    • SHA256

      97f21ba207ce6b13dc6f9007bc6d45724b4b65336a6754f94e09e8021f56e6f2

    • SHA512

      254046b87e168dd05b18df07191961c7ff3e6450d41eedf0578d31f17d278b88262b3b53874afadbc1f7bac3fc8909e823935515264b54f5e2d8fe05f3e4aafc

    • SSDEEP

      12288:ynUOJQh5RZn/GLslaySdNbwBrbHP6cAC9v64zjY//+7kI3E+whiBYjS:ync5RZn/GLslCw5bv6BUvp8/voENhW

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks