General

  • Target

    ef57716c5bf4d468fca73f349fb56356_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240414-yae3jabf54

  • MD5

    ef57716c5bf4d468fca73f349fb56356

  • SHA1

    2df2cd9ce42560c39e2b52805af041141b66edeb

  • SHA256

    e0898e4fea5689a0a5ad6f8476a4e21715134a54beec2f3dd5e803605ad89f3d

  • SHA512

    9e011c101633704a7cb5170ad1c3c1e2daf91c02e07cb634ffbca9f0e444ad18e637a1d36b85a072c9f9843e80bdf7eea31566edbd08e890101d250c7f700a18

  • SSDEEP

    24576:+VQzYOAUGo4DnDQECCkExcewt9Eu/ivvS+Ad3Mxy:+iE6j4Dnx97SEGd

Malware Config

Extracted

Family

raccoon

Botnet

3659cc597a258a4a805c5672721af02cdb861a23

Attributes
  • url4cnc

    https://telete.in/jredmankun

rc4.plain
rc4.plain

Targets

    • Target

      ef57716c5bf4d468fca73f349fb56356_JaffaCakes118

    • Size

      1.4MB

    • MD5

      ef57716c5bf4d468fca73f349fb56356

    • SHA1

      2df2cd9ce42560c39e2b52805af041141b66edeb

    • SHA256

      e0898e4fea5689a0a5ad6f8476a4e21715134a54beec2f3dd5e803605ad89f3d

    • SHA512

      9e011c101633704a7cb5170ad1c3c1e2daf91c02e07cb634ffbca9f0e444ad18e637a1d36b85a072c9f9843e80bdf7eea31566edbd08e890101d250c7f700a18

    • SSDEEP

      24576:+VQzYOAUGo4DnDQECCkExcewt9Eu/ivvS+Ad3Mxy:+iE6j4Dnx97SEGd

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks