General

  • Target

    e34fd468760872fc4d7d9c5f140735d3_JaffaCakes118

  • Size

    585KB

  • Sample

    240406-z7lr1sbc4v

  • MD5

    e34fd468760872fc4d7d9c5f140735d3

  • SHA1

    243cb36da36fb9c2822c6392654fc1f1001a587f

  • SHA256

    3157362ffceda367a0d158aeece4db7a85d882f1cc59dec1fbb21b12cb65149d

  • SHA512

    25340ac9db56883daa4c3d08c4d63d740e22de3b112ab6b45b46ec8d125b840926c00a1317893b3b1791a6915f71f03dd39d4e43d203e32f984d52426f076133

  • SSDEEP

    12288:hoaGmONkGDB/hsMMokvmw/G6100Dtlle7IysTtBm:hopkGDB/hsMce6uu5O6tQ

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

b5998c5938c0648ce1e41086dc9f3e22ac1750bd

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target

      e34fd468760872fc4d7d9c5f140735d3_JaffaCakes118

    • Size

      585KB

    • MD5

      e34fd468760872fc4d7d9c5f140735d3

    • SHA1

      243cb36da36fb9c2822c6392654fc1f1001a587f

    • SHA256

      3157362ffceda367a0d158aeece4db7a85d882f1cc59dec1fbb21b12cb65149d

    • SHA512

      25340ac9db56883daa4c3d08c4d63d740e22de3b112ab6b45b46ec8d125b840926c00a1317893b3b1791a6915f71f03dd39d4e43d203e32f984d52426f076133

    • SSDEEP

      12288:hoaGmONkGDB/hsMMokvmw/G6100Dtlle7IysTtBm:hopkGDB/hsMce6uu5O6tQ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks