Overview

overview

10

Static

static

3

8ec29972df...18.exe

windows7-x64

10

8ec29972df...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ec29972dfd9a10e3da2c9ee240cc755_JaffaCakes118

  • Size

    675KB

  • Sample

    240602-vb2fdahg47

  • MD5

    8ec29972dfd9a10e3da2c9ee240cc755

  • SHA1

    5980b3c0314fc20f5ac6f3db31bbed41192c193a

  • SHA256

    42b5e1b39fbd5952799a83c063617e0c1010447bffce1bec27ef5e331848aa67

  • SHA512

    7432c3fc1afcf3ea8562c744d0bb750badc52a25e3fd1e3cbeb4cbf4e4e2c4e23f16200ee45cb1d3e3ce2ca7524f0330dfe239bdc25d5faa9a2cd37f8f9a1120

  • SSDEEP

    12288:ct1HXw/XtrzgoB0+XDzGw1GADmB7hGsr0T6+wUbxGVnvrHf2k:PXaoBQsdmusr0DbxGVvrOk

Score
10/10
raccoon218710f63bc498a79834837a7fbeda5d33dd357cstealer

Malware Config

Extracted

Family

raccoon

Botnet

218710f63bc498a79834837a7fbeda5d33dd357c

Attributes
  • url4cnc

    https://telete.in/h_sinnerman_1

rc4.plain
rc4.plain

Targets

    • Target

      8ec29972dfd9a10e3da2c9ee240cc755_JaffaCakes118

    • Size

      675KB

    • MD5

      8ec29972dfd9a10e3da2c9ee240cc755

    • SHA1

      5980b3c0314fc20f5ac6f3db31bbed41192c193a

    • SHA256

      42b5e1b39fbd5952799a83c063617e0c1010447bffce1bec27ef5e331848aa67

    • SHA512

      7432c3fc1afcf3ea8562c744d0bb750badc52a25e3fd1e3cbeb4cbf4e4e2c4e23f16200ee45cb1d3e3ce2ca7524f0330dfe239bdc25d5faa9a2cd37f8f9a1120

    • SSDEEP

      12288:ct1HXw/XtrzgoB0+XDzGw1GADmB7hGsr0T6+wUbxGVnvrHf2k:PXaoBQsdmusr0DbxGVvrOk

    Score
    10/10
    raccoon218710f63bc498a79834837a7fbeda5d33dd357cstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks