General

  • Target

    d80ba2eea8ea85b338cf0532b74536cc

  • Size

    490KB

  • Sample

    240320-gk9apahh86

  • MD5

    d80ba2eea8ea85b338cf0532b74536cc

  • SHA1

    45e980af0f8d53ebe36e7b1ef51b29950a40ba8b

  • SHA256

    ea265b0980deb13124feef8e43218879cdeb5c4c813416a3e64f6dce07ae0d31

  • SHA512

    b35dc59957e30eb2fa52e6ceafcc9067e862b7271a100d6124fd627810a0edbf3142e89592e980c1195b6548d825c812ac64567c1a521877b062f879ddd577c9

  • SSDEEP

    12288:ejsfMpyece8n9W9TATv/9lw/Fy4A1ZFQaHDFn:ecMp449T+cr3eFn

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      d80ba2eea8ea85b338cf0532b74536cc

    • Size

      490KB

    • MD5

      d80ba2eea8ea85b338cf0532b74536cc

    • SHA1

      45e980af0f8d53ebe36e7b1ef51b29950a40ba8b

    • SHA256

      ea265b0980deb13124feef8e43218879cdeb5c4c813416a3e64f6dce07ae0d31

    • SHA512

      b35dc59957e30eb2fa52e6ceafcc9067e862b7271a100d6124fd627810a0edbf3142e89592e980c1195b6548d825c812ac64567c1a521877b062f879ddd577c9

    • SSDEEP

      12288:ejsfMpyece8n9W9TATv/9lw/Fy4A1ZFQaHDFn:ecMp449T+cr3eFn

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks