Overview

overview

10

Static

static

3

5c9e2b97d5...18.exe

windows7-x64

10

5c9e2b97d5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c9e2b97d5a4b86c6c64edf30f058f45_JaffaCakes118

  • Size

    526KB

  • Sample

    240520-cfq64afa6s

  • MD5

    5c9e2b97d5a4b86c6c64edf30f058f45

  • SHA1

    6a8434f83d4d160fd796e3a3f50a020cf5974903

  • SHA256

    31b85fde884193b976d6cae2209bd2c95f13d6de5d0ff4206612a8768a0c65d6

  • SHA512

    520b42812b6f305ec8ddd8601313dca8dab9fc02a0e102c392f1836519aaeb6fbe5beacef8bc83355343c959f40b6e8e5fe13507be67dc4e8c1c82fb3c3bc802

  • SSDEEP

    6144:hoSg6+39FKBPWjllRX2R6XdJbI1OAw0k6qOk/Ur0Ed1t02apBHU4/3+4Vz+Eu0+J:hoDlmBPWjJ/Shrqx/krdAfT7Zu/Ci6+

Score
10/10
raccoon2141da92b4ad3ac837e01675ce3a1681885395e0stealer

Malware Config

Extracted

Family

raccoon

Botnet

2141da92b4ad3ac837e01675ce3a1681885395e0

Attributes
  • url4cnc

    https://raw.githubusercontent.com/metzler99muirbfkm/js/master/home.html

rc4.plain
rc4.plain

Targets

    • Target

      5c9e2b97d5a4b86c6c64edf30f058f45_JaffaCakes118

    • Size

      526KB

    • MD5

      5c9e2b97d5a4b86c6c64edf30f058f45

    • SHA1

      6a8434f83d4d160fd796e3a3f50a020cf5974903

    • SHA256

      31b85fde884193b976d6cae2209bd2c95f13d6de5d0ff4206612a8768a0c65d6

    • SHA512

      520b42812b6f305ec8ddd8601313dca8dab9fc02a0e102c392f1836519aaeb6fbe5beacef8bc83355343c959f40b6e8e5fe13507be67dc4e8c1c82fb3c3bc802

    • SSDEEP

      6144:hoSg6+39FKBPWjllRX2R6XdJbI1OAw0k6qOk/Ur0Ed1t02apBHU4/3+4Vz+Eu0+J:hoDlmBPWjJ/Shrqx/krdAfT7Zu/Ci6+

    Score
    10/10
    raccoon2141da92b4ad3ac837e01675ce3a1681885395e0stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks