Overview

overview

10

Static

static

3

794fd53672...18.exe

windows7-x64

10

794fd53672...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    794fd53672ca4d097d20087993d8c5ec_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240527-q5mrvsee91

  • MD5

    794fd53672ca4d097d20087993d8c5ec

  • SHA1

    6535b5046659ff169ba0f60d83416398b54be518

  • SHA256

    f9395666396ddd990c6275b44d3b376fa49fdae187f4841275dc72271467f191

  • SHA512

    88542d21075f88b9213d47c71263246351fd6a0b475ce9606975a7242eace88422beaafe6c7af97bf4e892c3703a55115753e54753ed739d58406304555b1ca5

  • SSDEEP

    12288:bUtSe4izalBUu01gTL5vBFWJKRlQH8OrNeXg85hlrv+5RQLH5n8YfjgzEhal8Qpe:bUU3kM0OllQcOrggylgR4B0gsl/pN5Z

Score
10/10
raccoon1efa8bc342e6231de758bd380849cb5c0fe63cdastealer

Malware Config

Extracted

Family

raccoon

Botnet

1efa8bc342e6231de758bd380849cb5c0fe63cda

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1GHkkOFIb-WQAfra8RoDiA0vdpNIMBugL

rc4.plain
rc4.plain

Targets

    • Target

      794fd53672ca4d097d20087993d8c5ec_JaffaCakes118

    • Size

      1.2MB

    • MD5

      794fd53672ca4d097d20087993d8c5ec

    • SHA1

      6535b5046659ff169ba0f60d83416398b54be518

    • SHA256

      f9395666396ddd990c6275b44d3b376fa49fdae187f4841275dc72271467f191

    • SHA512

      88542d21075f88b9213d47c71263246351fd6a0b475ce9606975a7242eace88422beaafe6c7af97bf4e892c3703a55115753e54753ed739d58406304555b1ca5

    • SSDEEP

      12288:bUtSe4izalBUu01gTL5vBFWJKRlQH8OrNeXg85hlrv+5RQLH5n8YfjgzEhal8Qpe:bUU3kM0OllQcOrggylgR4B0gsl/pN5Z

    Score
    10/10
    raccoon1efa8bc342e6231de758bd380849cb5c0fe63cdastealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks