Overview

overview

10

Static

static

1

fd8ff1c861...18.exe

windows7-x64

10

fd8ff1c861...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd8ff1c8618ccfc9a11fab1980c849bd_JaffaCakes118

  • Size

    513KB

  • Sample

    240420-y379sahe5w

  • MD5

    fd8ff1c8618ccfc9a11fab1980c849bd

  • SHA1

    c1f9c63fada0b2de6f5f42a5a6f5e2d32b79dccd

  • SHA256

    1da8e2355f5c217c5e142b1ce9a2f9e9599b06025787602ccdae02bad06bf36c

  • SHA512

    c7e42c8410246f01a410005a9a1706b532458581dbe68680fe47015ce504410aecd29ed94b26d4348a2417d9fa9ea5527f3cac695fa4fef2b66620cc8b7493e9

  • SSDEEP

    12288:1irZ3mcxsLZe/ZasZrOEMugcVjySfRS4zcsKLmn:14Fmcx7rMudVvbQLmn

Score
10/10
raccoon0b83cb02a824f2d53c99cfc8fd4a2d84bbe799eastealer

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

0b83cb02a824f2d53c99cfc8fd4a2d84bbe799ea

Attributes
  • url4cnc

    https://telete.in/bibisberont

rc4.plain
rc4.plain

Targets

    • Target

      fd8ff1c8618ccfc9a11fab1980c849bd_JaffaCakes118

    • Size

      513KB

    • MD5

      fd8ff1c8618ccfc9a11fab1980c849bd

    • SHA1

      c1f9c63fada0b2de6f5f42a5a6f5e2d32b79dccd

    • SHA256

      1da8e2355f5c217c5e142b1ce9a2f9e9599b06025787602ccdae02bad06bf36c

    • SHA512

      c7e42c8410246f01a410005a9a1706b532458581dbe68680fe47015ce504410aecd29ed94b26d4348a2417d9fa9ea5527f3cac695fa4fef2b66620cc8b7493e9

    • SSDEEP

      12288:1irZ3mcxsLZe/ZasZrOEMugcVjySfRS4zcsKLmn:14Fmcx7rMudVvbQLmn

    Score
    10/10
    raccoon0b83cb02a824f2d53c99cfc8fd4a2d84bbe799eastealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks