General

  • Target

    5492184cede43714f2bd04d9768715d0_JaffaCakes118

  • Size

    444KB

  • Sample

    240518-n1t92aab97

  • MD5

    5492184cede43714f2bd04d9768715d0

  • SHA1

    79c888bc086943fae45a9a0be87d72f4d9ab4871

  • SHA256

    2c38dcf0a0a220e77973191ee79e086f578b7fd9933beb448b82dc85113cc549

  • SHA512

    2e6bd2e044031cec1ef93fc7d0e3bbc1ea76675535f1a8b9d630165fbb3dae53e6a9ce01cd93d5e3c6213aac087d046e76276496b20fd79c24c42167b36655ce

  • SSDEEP

    6144:7jVHLtmG0GS24YiWT/Fy8/YL0W7VgM1yy1WOmSzCj3YYx1haAuMRUf:7jRtGYiOyiYAZy16LFaf

Malware Config

Extracted

Family

raccoon

Botnet

41711bc5a4ae1e2ac631a21bcc5418009c95e214

Attributes
  • url4cnc

    https://telete.in/malwart123

rc4.plain
rc4.plain

Targets

    • Target

      5492184cede43714f2bd04d9768715d0_JaffaCakes118

    • Size

      444KB

    • MD5

      5492184cede43714f2bd04d9768715d0

    • SHA1

      79c888bc086943fae45a9a0be87d72f4d9ab4871

    • SHA256

      2c38dcf0a0a220e77973191ee79e086f578b7fd9933beb448b82dc85113cc549

    • SHA512

      2e6bd2e044031cec1ef93fc7d0e3bbc1ea76675535f1a8b9d630165fbb3dae53e6a9ce01cd93d5e3c6213aac087d046e76276496b20fd79c24c42167b36655ce

    • SSDEEP

      6144:7jVHLtmG0GS24YiWT/Fy8/YL0W7VgM1yy1WOmSzCj3YYx1haAuMRUf:7jRtGYiOyiYAZy16LFaf

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks