General

  • Target

    863892c7bcb76e23cb005b57a1ed0227

  • Size

    580KB

  • Sample

    240201-hmgtwsffdn

  • MD5

    863892c7bcb76e23cb005b57a1ed0227

  • SHA1

    f8d8881df70df9a7ce57ff25dc0799aeb8da09cc

  • SHA256

    5653ecbd124ff2bbb50d417cde9d5457d233db5a58f2a8e559f677cd18e676b0

  • SHA512

    2b49b9e7153785b9f00cc119fcf00de219f7a0eb8b6bdb0a6ba844322f9dd1404c4e0c6f96d2be9ac06ee93504b44dd288d4e8fc509aa967ad0d7a7460428e16

  • SSDEEP

    12288:ziCRhAyGNI0YWPAqrL8VOKrUZWC3ij+erprAmVKbLPgu:zNFGNI0YWhEVrQWp+erfMLp

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      863892c7bcb76e23cb005b57a1ed0227

    • Size

      580KB

    • MD5

      863892c7bcb76e23cb005b57a1ed0227

    • SHA1

      f8d8881df70df9a7ce57ff25dc0799aeb8da09cc

    • SHA256

      5653ecbd124ff2bbb50d417cde9d5457d233db5a58f2a8e559f677cd18e676b0

    • SHA512

      2b49b9e7153785b9f00cc119fcf00de219f7a0eb8b6bdb0a6ba844322f9dd1404c4e0c6f96d2be9ac06ee93504b44dd288d4e8fc509aa967ad0d7a7460428e16

    • SSDEEP

      12288:ziCRhAyGNI0YWPAqrL8VOKrUZWC3ij+erprAmVKbLPgu:zNFGNI0YWhEVrQWp+erfMLp

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks