Overview

overview

10

Static

static

3

028324fcae...18.exe

windows7-x64

10

028324fcae...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    028324fcaeb320c598aadb6460183c22_JaffaCakes118

  • Size

    546KB

  • Sample

    240622-rcsyvavejn

  • MD5

    028324fcaeb320c598aadb6460183c22

  • SHA1

    58494c059b60fd0069829de9f1c391d396cc29ac

  • SHA256

    4a4e1a2d468a912cc0d71fc6699d5b35e80c8d1825ff16f3d91130511e653542

  • SHA512

    da2d3be1b65850c7dbf75db63b8a7134919c92e0b1b35c49f34d01a9d6c19b98fe47f2623aac92be3a4ce8f1e9c1a18e9c329bd87a766647ac8dc30ad35a7949

  • SSDEEP

    12288:WLhpZ9fFGJx+1ILG9+JppzVmX6F168p527JTs7qhqh1zxp6L:WfZ9fFkg9+RzVmX6Fb6Ts7qhqhB36L

Score
10/10
raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealer

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      028324fcaeb320c598aadb6460183c22_JaffaCakes118

    • Size

      546KB

    • MD5

      028324fcaeb320c598aadb6460183c22

    • SHA1

      58494c059b60fd0069829de9f1c391d396cc29ac

    • SHA256

      4a4e1a2d468a912cc0d71fc6699d5b35e80c8d1825ff16f3d91130511e653542

    • SHA512

      da2d3be1b65850c7dbf75db63b8a7134919c92e0b1b35c49f34d01a9d6c19b98fe47f2623aac92be3a4ce8f1e9c1a18e9c329bd87a766647ac8dc30ad35a7949

    • SSDEEP

      12288:WLhpZ9fFGJx+1ILG9+JppzVmX6F168p527JTs7qhqh1zxp6L:WfZ9fFkg9+RzVmX6Fb6Ts7qhqhB36L

    Score
    10/10
    raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks