General

  • Target

    dabdfbed816b2813b2239c9abf414f18_JaffaCakes118

  • Size

    511KB

  • Sample

    240911-tsa43szfjq

  • MD5

    dabdfbed816b2813b2239c9abf414f18

  • SHA1

    da9293468e03c8fa1a8266420149a0bb56e94b83

  • SHA256

    a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896

  • SHA512

    8cae781d0db39558cb18bcb168c9404f449b1ea6cbfa6a61883c5d229e981f56c699d60fc83fe6719b1833849d77471a12525374ff5fc5c39ee8cd8d933e5b4b

  • SSDEEP

    12288:xnud5v3/99zNuRW+MahkP1rgtMtqnhPdtLg:wn3VZ2W+FargjhPD

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

9ba64f4b6fe448911470a88f09d6e7d5b92ff0ab

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      dabdfbed816b2813b2239c9abf414f18_JaffaCakes118

    • Size

      511KB

    • MD5

      dabdfbed816b2813b2239c9abf414f18

    • SHA1

      da9293468e03c8fa1a8266420149a0bb56e94b83

    • SHA256

      a1ac47ffd67625d5b940a151d4754ffe720a2a45681b58179992e688aa30e896

    • SHA512

      8cae781d0db39558cb18bcb168c9404f449b1ea6cbfa6a61883c5d229e981f56c699d60fc83fe6719b1833849d77471a12525374ff5fc5c39ee8cd8d933e5b4b

    • SSDEEP

      12288:xnud5v3/99zNuRW+MahkP1rgtMtqnhPdtLg:wn3VZ2W+FargjhPD

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks