Overview

overview

10

Static

static

3

a5a5e6b77a...18.exe

windows7-x64

10

a5a5e6b77a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5a5e6b77a858686c8eaadcee74a062f_JaffaCakes118

  • Size

    495KB

  • Sample

    240613-p6yebazclf

  • MD5

    a5a5e6b77a858686c8eaadcee74a062f

  • SHA1

    9312afa7d2489549ed1358daad789146f4b5bd12

  • SHA256

    b2680dc9a0b764200320bee2d0fd3b460e80a0b112b5ed028108fe156413cda2

  • SHA512

    d52b7669216f00c5b5190b45c31f5e5af6268439f5ef3693c59cd824d05579fd4eeff78dc95c22cfd725186cf8d364061b1672236679ce973ce22b46085622b0

  • SSDEEP

    12288:kHMd9jg7wUuUrQ606s/hASoMODthTR8Gb:kck7jxrQDZtoMOZ

Score
10/10
raccoona0147673f1ffee897d96ccd2b3b1772e6fc7f43dstealer

Malware Config

Extracted

Family

raccoon

Botnet

a0147673f1ffee897d96ccd2b3b1772e6fc7f43d

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1_vlAiFcFaZ1YCOoDDvNrC8dW-pvqw3_t

rc4.plain
rc4.plain

Targets

    • Target

      a5a5e6b77a858686c8eaadcee74a062f_JaffaCakes118

    • Size

      495KB

    • MD5

      a5a5e6b77a858686c8eaadcee74a062f

    • SHA1

      9312afa7d2489549ed1358daad789146f4b5bd12

    • SHA256

      b2680dc9a0b764200320bee2d0fd3b460e80a0b112b5ed028108fe156413cda2

    • SHA512

      d52b7669216f00c5b5190b45c31f5e5af6268439f5ef3693c59cd824d05579fd4eeff78dc95c22cfd725186cf8d364061b1672236679ce973ce22b46085622b0

    • SSDEEP

      12288:kHMd9jg7wUuUrQ606s/hASoMODthTR8Gb:kck7jxrQDZtoMOZ

    Score
    10/10
    raccoona0147673f1ffee897d96ccd2b3b1772e6fc7f43dstealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks