General

  • Target

    de624ace9d02c8b92db63e3b4dd8ef80

  • Size

    579KB

  • Sample

    240325-tcg8fsfb2s

  • MD5

    de624ace9d02c8b92db63e3b4dd8ef80

  • SHA1

    a96e91a45084231bae82b4c385dde794860ff1d2

  • SHA256

    f863a51219b4aa42f10aba496519923419e6b8b354d500330c1b1610bbe5cf7a

  • SHA512

    f482bcf1109aa32dbc6024f22f85f79a125853c295f44416daacc74e976c63c6ab08b69a7ee23b00fc5101aff5a114cfdb6538a4495793161f97a9f52ed647e0

  • SSDEEP

    12288:Csfy5Dnde8kdPRfEeyzSOqjlA1xTn5NRLmfRNXEa7aozpf3:Cvnde8kdVOTxtzifRNX97aif

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      de624ace9d02c8b92db63e3b4dd8ef80

    • Size

      579KB

    • MD5

      de624ace9d02c8b92db63e3b4dd8ef80

    • SHA1

      a96e91a45084231bae82b4c385dde794860ff1d2

    • SHA256

      f863a51219b4aa42f10aba496519923419e6b8b354d500330c1b1610bbe5cf7a

    • SHA512

      f482bcf1109aa32dbc6024f22f85f79a125853c295f44416daacc74e976c63c6ab08b69a7ee23b00fc5101aff5a114cfdb6538a4495793161f97a9f52ed647e0

    • SSDEEP

      12288:Csfy5Dnde8kdPRfEeyzSOqjlA1xTn5NRLmfRNXEa7aozpf3:Cvnde8kdVOTxtzifRNX97aif

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks