General

  • Target

    3aa41ad444d0f5d89f9c53a5677535f6_JaffaCakes118

  • Size

    549KB

  • Sample

    240711-zghyfavhrc

  • MD5

    3aa41ad444d0f5d89f9c53a5677535f6

  • SHA1

    299665a9447471619814b577688694a6c30b5fdb

  • SHA256

    dbbc522719582c66077a06ac1b94fedeed360335d5762dbc78a5744d4309ce93

  • SHA512

    c96bb855050d72ce0936bad78976c6442faa8778dc9947f42b1eb3d2488fcfeb7ebb2eca022656b5e27692ae941f8e26e1e453ccf7c742cb2cdfb2d74ffa6247

  • SSDEEP

    12288:q0IWJO4rDw16c+iSKuwKtXdewqMGin2WNH+CL5gG1bPIoLgdBjSBgyLwJY:AmRD4p+iPuLDewqgnHffP4dBjSqyLqY

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

99fdcb30af520f176f0e14e858c8bb23c13330d9

Attributes
  • url4cnc

    https://tttttt.me/jrrand0mer

rc4.plain
rc4.plain

Targets

    • Target

      3aa41ad444d0f5d89f9c53a5677535f6_JaffaCakes118

    • Size

      549KB

    • MD5

      3aa41ad444d0f5d89f9c53a5677535f6

    • SHA1

      299665a9447471619814b577688694a6c30b5fdb

    • SHA256

      dbbc522719582c66077a06ac1b94fedeed360335d5762dbc78a5744d4309ce93

    • SHA512

      c96bb855050d72ce0936bad78976c6442faa8778dc9947f42b1eb3d2488fcfeb7ebb2eca022656b5e27692ae941f8e26e1e453ccf7c742cb2cdfb2d74ffa6247

    • SSDEEP

      12288:q0IWJO4rDw16c+iSKuwKtXdewqMGin2WNH+CL5gG1bPIoLgdBjSBgyLwJY:AmRD4p+iPuLDewqgnHffP4dBjSqyLqY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix

Tasks