raccoon | 30a38f7636a13e60895704e47d9b4c01f2215710edef8b4d24461ec3643a3444 | Triage

Sharing

General

Target

JaffaCakes118_30a38f7636a13e60895704e47d9b4c01f2215710edef8b4d24461ec3643a3444
Size

632KB
Sample

241229-3vjzfa1kfk
MD5

d58991ed5f1d94b21513ce8b2a20977a
SHA1

a6bff695aed7627589259646ddf78769783b8add
SHA256

30a38f7636a13e60895704e47d9b4c01f2215710edef8b4d24461ec3643a3444
SHA512

b4188bf8331a952ed7691d81b9d3c08460d0cf6e051e3d4e94623403ade4906895072c1522f4857cc2b6c4b26a10482a7082fd1c6f47ececefefbaeb8f46258b
SSDEEP

12288:yOBNwDpxH7rbl+6ji1aFDfPY9O2KC21WVxeoo53Sc:yqNwznJ+6cWDuqjn

Score

10^/10

raccoon findfirstfilew discovery

Malware Config

Extracted

Family

raccoon

Botnet

FindFirstFileW

rc4.plain

Targets

- Target
  
  JaffaCakes118_30a38f7636a13e60895704e47d9b4c01f2215710edef8b4d24461ec3643a3444
- Size
  
  632KB
- MD5
  
  d58991ed5f1d94b21513ce8b2a20977a
- SHA1
  
  a6bff695aed7627589259646ddf78769783b8add
- SHA256
  
  30a38f7636a13e60895704e47d9b4c01f2215710edef8b4d24461ec3643a3444
- SHA512
  
  b4188bf8331a952ed7691d81b9d3c08460d0cf6e051e3d4e94623403ade4906895072c1522f4857cc2b6c4b26a10482a7082fd1c6f47ececefefbaeb8f46258b
- SSDEEP
  
  12288:yOBNwDpxH7rbl+6ji1aFDfPY9O2KC21WVxeoo53Sc:yqNwznJ+6cWDuqjn
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

findfirstfilewraccoon

behavioral1

behavioral2