General

  • Target

    8b4d459e1f039599cfbab999454921da_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240402-nkq8fagd9t

  • MD5

    8b4d459e1f039599cfbab999454921da

  • SHA1

    98ae9a827f139b07a3e8306bddf81793fa088e1d

  • SHA256

    1ef182e9f60e7820cd39d76dd43b368c0728f8027c5e979b00ae3e40c5821bfc

  • SHA512

    9125acb5b19908c1634dc927ca4af67735081a9370716d7777fe178cc57a2d6d99db01e8554128c388ec5ddeb2bc63b67c31d9a6a2ed720e06bdce96c223f276

  • SSDEEP

    24576:dsoSQEXsVl/mvBeItVzkbBPf/GCUgQuIdtv6HJWi:dsmEXSOvBhTzOl/dUKIDSH0i

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

27c9b6ae257af0ad6f3f3330ea633fc782fa4daf

Attributes
  • url4cnc

    http://teletop.top/iot3redisium

    http://teleta.top/iot3redisium

    https://t.me/iot3redisium

rc4.plain
rc4.plain

Targets

    • Target

      8b4d459e1f039599cfbab999454921da_JaffaCakes118

    • Size

      1.1MB

    • MD5

      8b4d459e1f039599cfbab999454921da

    • SHA1

      98ae9a827f139b07a3e8306bddf81793fa088e1d

    • SHA256

      1ef182e9f60e7820cd39d76dd43b368c0728f8027c5e979b00ae3e40c5821bfc

    • SHA512

      9125acb5b19908c1634dc927ca4af67735081a9370716d7777fe178cc57a2d6d99db01e8554128c388ec5ddeb2bc63b67c31d9a6a2ed720e06bdce96c223f276

    • SSDEEP

      24576:dsoSQEXsVl/mvBeItVzkbBPf/GCUgQuIdtv6HJWi:dsmEXSOvBhTzOl/dUKIDSH0i

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix

Tasks