General

  • Target

    a2abae2268924ae29bb3960c9022dee6

  • Size

    580KB

  • Sample

    240224-y6kynaed8t

  • MD5

    a2abae2268924ae29bb3960c9022dee6

  • SHA1

    65357cbd005af0e223794b8d627e10845945f23c

  • SHA256

    763e913844d551177dc4c228c7b629c71b355cd04110b9ca2fcc5e8aee22200f

  • SHA512

    b03cb6655c3affe2c8407ed600e093574892416a438826b7a5cf3ce40bdc7213cab52cbf681ceecf9dc88004e29b62fcfe726cd78f6dbeb6d5ebd61560ab8f67

  • SSDEEP

    12288:+twmBxw+MePKs1G3pH4qwoETYQ4IpDNH6J/LKCAPSmSY:+Lw+MePKs1GGoePNAXGSmf

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      a2abae2268924ae29bb3960c9022dee6

    • Size

      580KB

    • MD5

      a2abae2268924ae29bb3960c9022dee6

    • SHA1

      65357cbd005af0e223794b8d627e10845945f23c

    • SHA256

      763e913844d551177dc4c228c7b629c71b355cd04110b9ca2fcc5e8aee22200f

    • SHA512

      b03cb6655c3affe2c8407ed600e093574892416a438826b7a5cf3ce40bdc7213cab52cbf681ceecf9dc88004e29b62fcfe726cd78f6dbeb6d5ebd61560ab8f67

    • SSDEEP

      12288:+twmBxw+MePKs1G3pH4qwoETYQ4IpDNH6J/LKCAPSmSY:+Lw+MePKs1GGoePNAXGSmf

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks