General

  • Target

    c18bb625859c7e26ae798cb679938edb_JaffaCakes118

  • Size

    513KB

  • Sample

    240825-zj3evswamn

  • MD5

    c18bb625859c7e26ae798cb679938edb

  • SHA1

    0f42269c66bc39def5b6953600fa2666da588aca

  • SHA256

    a1fbf4c01b9cbd00eb95d3080423c2e2ce57c1025beb520b482b258b84b0e8db

  • SHA512

    64cd271d23e32de62dd3b388a5e53480ab47218808808df66dbf181f9854a33503bd239c30ade21418cb41d5608a18c991652249c1aa7f82b02f2e4802069e57

  • SSDEEP

    12288:5o6dW0obl7zxBloV9bQRmOOCpZIqoXBNDowqLQ:ZTodHAKmOppZIz0LQ

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

7f6d1759a7e436f9422adfda53777b5d9a045344

Attributes
  • url4cnc

    http://teletop.top/tika31ramencomp

    http://teleta.top/tika31ramencomp

    https://t.me/tika31ramencomp

rc4.plain
rc4.plain

Targets

    • Target

      c18bb625859c7e26ae798cb679938edb_JaffaCakes118

    • Size

      513KB

    • MD5

      c18bb625859c7e26ae798cb679938edb

    • SHA1

      0f42269c66bc39def5b6953600fa2666da588aca

    • SHA256

      a1fbf4c01b9cbd00eb95d3080423c2e2ce57c1025beb520b482b258b84b0e8db

    • SHA512

      64cd271d23e32de62dd3b388a5e53480ab47218808808df66dbf181f9854a33503bd239c30ade21418cb41d5608a18c991652249c1aa7f82b02f2e4802069e57

    • SSDEEP

      12288:5o6dW0obl7zxBloV9bQRmOOCpZIqoXBNDowqLQ:ZTodHAKmOppZIz0LQ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks