General

  • Target

    f41543a644518a10310dc1ad0f426a2f_JaffaCakes118

  • Size

    586KB

  • Sample

    240416-w9hatsba2v

  • MD5

    f41543a644518a10310dc1ad0f426a2f

  • SHA1

    ff264d3050f0ba4b051297436d179f8ae085f0dd

  • SHA256

    4cadd46b6ff2ab3dc1ebcf6687480e22da27c4b44902a9d13d3a0c7454b6c854

  • SHA512

    f2b95fd006cb9b77bd0c820158bf39d32f983fbffac86defa662c5430e3db8c789aa69a7593aa9a26c9737066e8b55a550b83f66231d5b816c7523e4bf67194e

  • SSDEEP

    12288:8EWNk/0SXeQkH1LbRcL/4FZXdKQgRYhwhjzFAK2PqoN/:8aXeQkH24HXdKDGhwhXFnDoN/

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

b5998c5938c0648ce1e41086dc9f3e22ac1750bd

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target

      f41543a644518a10310dc1ad0f426a2f_JaffaCakes118

    • Size

      586KB

    • MD5

      f41543a644518a10310dc1ad0f426a2f

    • SHA1

      ff264d3050f0ba4b051297436d179f8ae085f0dd

    • SHA256

      4cadd46b6ff2ab3dc1ebcf6687480e22da27c4b44902a9d13d3a0c7454b6c854

    • SHA512

      f2b95fd006cb9b77bd0c820158bf39d32f983fbffac86defa662c5430e3db8c789aa69a7593aa9a26c9737066e8b55a550b83f66231d5b816c7523e4bf67194e

    • SSDEEP

      12288:8EWNk/0SXeQkH1LbRcL/4FZXdKQgRYhwhjzFAK2PqoN/:8aXeQkH24HXdKDGhwhXFnDoN/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks