Overview

overview

10

Static

static

3

924dab6b30...18.exe

windows7-x64

10

924dab6b30...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    924dab6b301e313ddeb154143125b82e_JaffaCakes118

  • Size

    453KB

  • Sample

    240603-s419zacd46

  • MD5

    924dab6b301e313ddeb154143125b82e

  • SHA1

    6b01cf3a98d15909eedcfcc4e97ed14c6e1e93ca

  • SHA256

    4a5d2c4c643ea9c4e49b709e9f60cbfb5f1d91f3b7ae3a5b565ccf45c1a332a4

  • SHA512

    ed1dec71295746d9ee005450515f1db9103fb9e15c2d8f437ee2f28e90adf8456f58123bc5ae31d48332e8aa649b5ad874828636ec136e41b4d3c69a25ac1bf6

  • SSDEEP

    12288:Z8rs5wbj5XlsEGjFNwJROiTTegC38B6fZ:Z2IWnsfjF+Jkj3

Score
10/10
raccoon0c1c62809d4bed6a5ad83ae4597e6589e0b3653fstealer

Malware Config

Extracted

Family

raccoon

Botnet

0c1c62809d4bed6a5ad83ae4597e6589e0b3653f

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1KfwhLEvx2BvL12dFjRdGVDxAkLH8rLPq

rc4.plain
rc4.plain

Targets

    • Target

      924dab6b301e313ddeb154143125b82e_JaffaCakes118

    • Size

      453KB

    • MD5

      924dab6b301e313ddeb154143125b82e

    • SHA1

      6b01cf3a98d15909eedcfcc4e97ed14c6e1e93ca

    • SHA256

      4a5d2c4c643ea9c4e49b709e9f60cbfb5f1d91f3b7ae3a5b565ccf45c1a332a4

    • SHA512

      ed1dec71295746d9ee005450515f1db9103fb9e15c2d8f437ee2f28e90adf8456f58123bc5ae31d48332e8aa649b5ad874828636ec136e41b4d3c69a25ac1bf6

    • SSDEEP

      12288:Z8rs5wbj5XlsEGjFNwJROiTTegC38B6fZ:Z2IWnsfjF+Jkj3

    Score
    10/10
    raccoon0c1c62809d4bed6a5ad83ae4597e6589e0b3653fstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks