raccoon | ed3988a7fd76730ec6c014b6bb0ea404f824d30ea764323a080fa4deb6ba8c2d | Triage

Sharing

General

Target

JaffaCakes118_ed3988a7fd76730ec6c014b6bb0ea404f824d30ea764323a080fa4deb6ba8c2d
Size

68KB
Sample

241223-vlghysvqhy
MD5

442769b57c01653a8b0239623bc36e97
SHA1

6e6f4d8f3a4094ccd08b9880f31ba64ccf486408
SHA256

ed3988a7fd76730ec6c014b6bb0ea404f824d30ea764323a080fa4deb6ba8c2d
SHA512

8b5aae37b58fc7799208d5958af7ab4e9d9480992044f10236a6060f88dd753e3dff995c884f463b804d58569555b9540bcdc156ba95ff0d1c0f23c0e02ca684
SSDEEP

768:RWwtoXuUHKxI2zN5JjR2yAKJwA2+LVY3z5nNYJNqEzFqhseSex/29yoOBMM:RtoeUqu2/5AKJwAXmnNYJNZDFApg

Score

10^/10

raccoon findfirstfilew discovery

Malware Config

Extracted

Family

raccoon

Botnet

FindFirstFileW

rc4.plain

Targets

- Target
  
  JaffaCakes118_ed3988a7fd76730ec6c014b6bb0ea404f824d30ea764323a080fa4deb6ba8c2d
- Size
  
  68KB
- MD5
  
  442769b57c01653a8b0239623bc36e97
- SHA1
  
  6e6f4d8f3a4094ccd08b9880f31ba64ccf486408
- SHA256
  
  ed3988a7fd76730ec6c014b6bb0ea404f824d30ea764323a080fa4deb6ba8c2d
- SHA512
  
  8b5aae37b58fc7799208d5958af7ab4e9d9480992044f10236a6060f88dd753e3dff995c884f463b804d58569555b9540bcdc156ba95ff0d1c0f23c0e02ca684
- SSDEEP
  
  768:RWwtoXuUHKxI2zN5JjR2yAKJwA2+LVY3z5nNYJNqEzFqhseSex/29yoOBMM:RtoeUqu2/5AKJwAXmnNYJNZDFApg
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

findfirstfilewraccoon

behavioral1

behavioral2