General

  • Target

    456b5e16067cb51809bb685cb355208a_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240714-mg7kkswgkj

  • MD5

    456b5e16067cb51809bb685cb355208a

  • SHA1

    a7863fc6d8ad07523d19474922bf8da42f558373

  • SHA256

    3df5633a05740e0e3d2ce9b861dc7a1473ec82a937ac6a8b7ef7519327ed551c

  • SHA512

    78f0d72ba25f81cd041b286ae1889fb18b068eba5c0dea6df2c88acb9f304c95b377523bc26976eb9d4bc4e65d74766f32ebb71d25384a8391e617c606f96e0b

  • SSDEEP

    24576:FczvENEiUOkTsJe85M1QdoXJ9Ut3WZdyLZRchgqDaXQrPYA1wBBAmat67Q:0Fhydel1wjAQk

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

801037cd451aff6e52efd64bf0a5f82074753f90

Attributes
  • url4cnc

    https://telete.in/jdex02000111

rc4.plain
rc4.plain

Targets

    • Target

      456b5e16067cb51809bb685cb355208a_JaffaCakes118

    • Size

      1.2MB

    • MD5

      456b5e16067cb51809bb685cb355208a

    • SHA1

      a7863fc6d8ad07523d19474922bf8da42f558373

    • SHA256

      3df5633a05740e0e3d2ce9b861dc7a1473ec82a937ac6a8b7ef7519327ed551c

    • SHA512

      78f0d72ba25f81cd041b286ae1889fb18b068eba5c0dea6df2c88acb9f304c95b377523bc26976eb9d4bc4e65d74766f32ebb71d25384a8391e617c606f96e0b

    • SSDEEP

      24576:FczvENEiUOkTsJe85M1QdoXJ9Ut3WZdyLZRchgqDaXQrPYA1wBBAmat67Q:0Fhydel1wjAQk

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks