General

  • Target

    82c49dd2427383d22d1e836e2adfd266_JaffaCakes118

  • Size

    482KB

  • Sample

    240530-cze8yacc39

  • MD5

    82c49dd2427383d22d1e836e2adfd266

  • SHA1

    9800e2b9e792e3f75aa34b65ba9a1f47b4371862

  • SHA256

    f2551d6506bebf6a9522f1fef7764f483214f8baee5595957dc80472f0b43b05

  • SHA512

    667832b086a226e09fce07d8c24cdff287a88821a7b026490ba27db5db1f90f3aa3af7d97ad76fb6ddd707fa294373c75366ae55ecaa3a8325f72af3fca4912a

  • SSDEEP

    12288:+G3HX9eWOStDm1/NvNsSpSe4rPPN/7BO2XG:3Neb6DsvJQH9T/

Malware Config

Extracted

Family

raccoon

Botnet

ef5c4ae6eecb3be16c1e2f8bfa015718d26593aa

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      82c49dd2427383d22d1e836e2adfd266_JaffaCakes118

    • Size

      482KB

    • MD5

      82c49dd2427383d22d1e836e2adfd266

    • SHA1

      9800e2b9e792e3f75aa34b65ba9a1f47b4371862

    • SHA256

      f2551d6506bebf6a9522f1fef7764f483214f8baee5595957dc80472f0b43b05

    • SHA512

      667832b086a226e09fce07d8c24cdff287a88821a7b026490ba27db5db1f90f3aa3af7d97ad76fb6ddd707fa294373c75366ae55ecaa3a8325f72af3fca4912a

    • SSDEEP

      12288:+G3HX9eWOStDm1/NvNsSpSe4rPPN/7BO2XG:3Neb6DsvJQH9T/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks