General

  • Target

    1e250dabb8d8b9ac32c365e79bffd4d0_JaffaCakes118

  • Size

    389KB

  • Sample

    240702-f5qhmsxhmd

  • MD5

    1e250dabb8d8b9ac32c365e79bffd4d0

  • SHA1

    81a036471ed42c4db52b7b6946e7115d039c5825

  • SHA256

    1f45539944023cd8dc8061991c8354a27c088810081a832898e751953eefea70

  • SHA512

    b210a2ace23bc57f770367ec6f4b1603d4b9090dff112e463fb995491df9d18f50582044297703baa48ac5996b4dfc5968a3f6b6e7b24e1ac90d1a050b4f2d62

  • SSDEEP

    6144:ZtUMtqOcjzQoXtGG09GFI7QrqXrhVY7OJDkVhOlbyuFpFf5isNcQPeu590fX:sMtOzQodGG6ySrTY6eh+5yK

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

a3a85b69314053c3bb015532d1a960a3d08baeb8

Attributes
  • url4cnc

    https://telete.in/baudemars

rc4.plain
rc4.plain

Targets

    • Target

      1e250dabb8d8b9ac32c365e79bffd4d0_JaffaCakes118

    • Size

      389KB

    • MD5

      1e250dabb8d8b9ac32c365e79bffd4d0

    • SHA1

      81a036471ed42c4db52b7b6946e7115d039c5825

    • SHA256

      1f45539944023cd8dc8061991c8354a27c088810081a832898e751953eefea70

    • SHA512

      b210a2ace23bc57f770367ec6f4b1603d4b9090dff112e463fb995491df9d18f50582044297703baa48ac5996b4dfc5968a3f6b6e7b24e1ac90d1a050b4f2d62

    • SSDEEP

      6144:ZtUMtqOcjzQoXtGG09GFI7QrqXrhVY7OJDkVhOlbyuFpFf5isNcQPeu590fX:sMtOzQodGG6ySrTY6eh+5yK

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks