General

  • Target

    e04469dd740dc6a6a04bcd97f377dddb_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240914-qlvclawblr

  • MD5

    e04469dd740dc6a6a04bcd97f377dddb

  • SHA1

    4bae8ccbe5adabf829d7b1374a71bb208a00304b

  • SHA256

    d7d78e04a47c4a394439f290c9c651d28034a216e31186ae3dd9d3341c31cef5

  • SHA512

    049f6cbde48a3fb84064e43a44e8da930b51856412dfe6a4cf007a70e67bd3f9ad53c211338b87603dccf690a4193302d5068b87e47cbeb05255c7d442e2c7a2

  • SSDEEP

    24576:RBT2nb2PWLfUzqwvwaq6Fq8KmxSRNjwoOpJ36e+i:RBPwf9wg6F3pxSipx64

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

01305f3c07016187d1cab4723045e0f79006b090

Attributes
  • url4cnc

    https://telete.in/joi3goldboy

rc4.plain
rc4.plain

Targets

    • Target

      e04469dd740dc6a6a04bcd97f377dddb_JaffaCakes118

    • Size

      1.0MB

    • MD5

      e04469dd740dc6a6a04bcd97f377dddb

    • SHA1

      4bae8ccbe5adabf829d7b1374a71bb208a00304b

    • SHA256

      d7d78e04a47c4a394439f290c9c651d28034a216e31186ae3dd9d3341c31cef5

    • SHA512

      049f6cbde48a3fb84064e43a44e8da930b51856412dfe6a4cf007a70e67bd3f9ad53c211338b87603dccf690a4193302d5068b87e47cbeb05255c7d442e2c7a2

    • SSDEEP

      24576:RBT2nb2PWLfUzqwvwaq6Fq8KmxSRNjwoOpJ36e+i:RBPwf9wg6F3pxSipx64

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks