General

  • Target

    f838d12c867fdb533a28d97d79f234b5_JaffaCakes118

  • Size

    579KB

  • Sample

    240418-r48tdaga66

  • MD5

    f838d12c867fdb533a28d97d79f234b5

  • SHA1

    47ff85dce01b70f18642da8d20df1462ea407fba

  • SHA256

    3c55142c3b6d0826e139a1a0b73c04fc48d7c1f79645ac1084fc2efa5464e7b5

  • SHA512

    75a3bb50c2c93f9d44478817ae6e8fb20c259068d7e1c17bba34f646560089ce3ec007e80b03c1087c9bc5e01afc60d7cec0fb3832e12c19a0cf7ebc53b72980

  • SSDEEP

    12288:VLdyyXZNhr1g6CaA349SS/fJprUioov8AyFD3k3y:VpZNhr1gZS/B6ioZFD3q

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      f838d12c867fdb533a28d97d79f234b5_JaffaCakes118

    • Size

      579KB

    • MD5

      f838d12c867fdb533a28d97d79f234b5

    • SHA1

      47ff85dce01b70f18642da8d20df1462ea407fba

    • SHA256

      3c55142c3b6d0826e139a1a0b73c04fc48d7c1f79645ac1084fc2efa5464e7b5

    • SHA512

      75a3bb50c2c93f9d44478817ae6e8fb20c259068d7e1c17bba34f646560089ce3ec007e80b03c1087c9bc5e01afc60d7cec0fb3832e12c19a0cf7ebc53b72980

    • SSDEEP

      12288:VLdyyXZNhr1g6CaA349SS/fJprUioov8AyFD3k3y:VpZNhr1gZS/B6ioZFD3q

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks