General

  • Target

    ef69bb25a1ab3df0bea89536f4f740e5_JaffaCakes118

  • Size

    584KB

  • Sample

    240414-yzmhxace35

  • MD5

    ef69bb25a1ab3df0bea89536f4f740e5

  • SHA1

    670f5d925f2a5e0dbb011356a0aeb01c344bfb60

  • SHA256

    74ce135948ae4d7c53c90befa412fad2e458fffd74df281d2f3525745a025a18

  • SHA512

    be2c0fe8a0867300e7db7aabceee2cd17ef1affb760bfd79fd851e11e64ec993ee39dc35e6c82933b2c5d8cfe54d86d7fd0a9ba1314a020716dbe64a032faffe

  • SSDEEP

    12288:z9IRhhmUtFVs9ThpscV89AjbHBaNeXIuG/QVu0WFOkB:z6GUtFVs9589AjbgNKIuW/0WME

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

92ebab08c5ac751002e0940e7383d528246b9dcc

Attributes
  • url4cnc

    https://t.me/open3entershift

rc4.plain
rc4.plain

Targets

    • Target

      ef69bb25a1ab3df0bea89536f4f740e5_JaffaCakes118

    • Size

      584KB

    • MD5

      ef69bb25a1ab3df0bea89536f4f740e5

    • SHA1

      670f5d925f2a5e0dbb011356a0aeb01c344bfb60

    • SHA256

      74ce135948ae4d7c53c90befa412fad2e458fffd74df281d2f3525745a025a18

    • SHA512

      be2c0fe8a0867300e7db7aabceee2cd17ef1affb760bfd79fd851e11e64ec993ee39dc35e6c82933b2c5d8cfe54d86d7fd0a9ba1314a020716dbe64a032faffe

    • SSDEEP

      12288:z9IRhhmUtFVs9ThpscV89AjbHBaNeXIuG/QVu0WFOkB:z6GUtFVs9589AjbgNKIuW/0WME

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix

Tasks