General

  • Target

    d91de16e32bfeae49b81deee85ae5a97_JaffaCakes118

  • Size

    532KB

  • Sample

    240910-1zvkmaxemp

  • MD5

    d91de16e32bfeae49b81deee85ae5a97

  • SHA1

    fa205ec6c3766810fae319c576ddd30a547a6dea

  • SHA256

    e55b2c5d2e4903c916a6b6982b7f0030ad4a4a3e0c1d3f8969e6646dafbb3c35

  • SHA512

    3ca9d37aa3af7c69ab1f5234a13d6c044b51d01e2cd9c5dba9356fd2cf02bb1b8cb42d0911e14e88198a0ee26d684d039d41165081fee8f39435bb003452dd65

  • SSDEEP

    12288:G7C/uj3/3MY9wZZkLGefxrxp+valtTlZKaYOw9zxp6L:G7XDNyZVefxrxp+SltrX636L

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

e672747afc67feb221ca60f8fc9e03adcf10f038

Attributes
  • url4cnc

    http://teletop.top/youyouhell0world

    http://teleta.top/youyouhell0world

    https://t.me/youyouhell0world

rc4.plain
rc4.plain

Targets

    • Target

      d91de16e32bfeae49b81deee85ae5a97_JaffaCakes118

    • Size

      532KB

    • MD5

      d91de16e32bfeae49b81deee85ae5a97

    • SHA1

      fa205ec6c3766810fae319c576ddd30a547a6dea

    • SHA256

      e55b2c5d2e4903c916a6b6982b7f0030ad4a4a3e0c1d3f8969e6646dafbb3c35

    • SHA512

      3ca9d37aa3af7c69ab1f5234a13d6c044b51d01e2cd9c5dba9356fd2cf02bb1b8cb42d0911e14e88198a0ee26d684d039d41165081fee8f39435bb003452dd65

    • SSDEEP

      12288:G7C/uj3/3MY9wZZkLGefxrxp+valtTlZKaYOw9zxp6L:G7XDNyZVefxrxp+SltrX636L

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks