Overview

overview

10

Static

static

3

f1aa28fcf0...18.exe

windows7-x64

10

f1aa28fcf0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1aa28fcf0cd2cb6cd5dbc4908ca8590_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240415-wqa3eafa6w

  • MD5

    f1aa28fcf0cd2cb6cd5dbc4908ca8590

  • SHA1

    bbbc7c2ae78c2d9ac3578417ee6ad7554bdb0c27

  • SHA256

    1b80ff02d64c454a3965d1c7ba536c5eca9e3c289301da557496f938c2a24a95

  • SHA512

    0fff26d72d92d05ea4d804a085c6928d0a0cb41ab6eac823be1168f98024627fca382b6d4d526b6b34c8c919d078d32c4150961bb164f1a6f0a718720fa75c98

  • SSDEEP

    24576:Q3oTCAVKjg0w9lrGzYwvpNIj/lj+0OFmvN+C95gi04KU6tpuFAD:Q3cCrD0Qcwvpq/HOFWNfNKU6tpIAD

Score
10/10
raccoonstealer

Malware Config

Targets

    • Target

      f1aa28fcf0cd2cb6cd5dbc4908ca8590_JaffaCakes118

    • Size

      1.4MB

    • MD5

      f1aa28fcf0cd2cb6cd5dbc4908ca8590

    • SHA1

      bbbc7c2ae78c2d9ac3578417ee6ad7554bdb0c27

    • SHA256

      1b80ff02d64c454a3965d1c7ba536c5eca9e3c289301da557496f938c2a24a95

    • SHA512

      0fff26d72d92d05ea4d804a085c6928d0a0cb41ab6eac823be1168f98024627fca382b6d4d526b6b34c8c919d078d32c4150961bb164f1a6f0a718720fa75c98

    • SSDEEP

      24576:Q3oTCAVKjg0w9lrGzYwvpNIj/lj+0OFmvN+C95gi04KU6tpuFAD:Q3cCrD0Qcwvpq/HOFWNfNKU6tpIAD

    Score
    10/10
    raccoonstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks