General

  • Target

    e5333102bbeb084f108be4bb0ec43c77_JaffaCakes118

  • Size

    816KB

  • Sample

    240916-vdw9fayekc

  • MD5

    e5333102bbeb084f108be4bb0ec43c77

  • SHA1

    6dab430563b675a7b2862e22e4baecc1fdf1e9bc

  • SHA256

    5c320dfd6b11443cd9a1da5bc57d14cfdd5aa74029bd4ee7380af5ae5c4d3f2d

  • SHA512

    24d931d32f14a1f919e938a6bfbb97709207f3780bd49c55087d5e295fb10b82045526ca830e948dc9f772f953e38a495308089620e77d124cfbb2f03216e751

  • SSDEEP

    12288:/EXU9kmhfj8ZPS9FMjZR+5vyY5ENiy1RvvcYmO:/EXU9kmhfwZaIR+5qY5ENR/vvcFO

Malware Config

Extracted

Family

raccoon

Botnet

0879f3f9f50e886ec63e775d522742521b0a8672

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1a1tksDqXCXfeD2CaltMHGaPMpftf7NBF

rc4.plain
rc4.plain

Targets

    • Target

      e5333102bbeb084f108be4bb0ec43c77_JaffaCakes118

    • Size

      816KB

    • MD5

      e5333102bbeb084f108be4bb0ec43c77

    • SHA1

      6dab430563b675a7b2862e22e4baecc1fdf1e9bc

    • SHA256

      5c320dfd6b11443cd9a1da5bc57d14cfdd5aa74029bd4ee7380af5ae5c4d3f2d

    • SHA512

      24d931d32f14a1f919e938a6bfbb97709207f3780bd49c55087d5e295fb10b82045526ca830e948dc9f772f953e38a495308089620e77d124cfbb2f03216e751

    • SSDEEP

      12288:/EXU9kmhfj8ZPS9FMjZR+5vyY5ENiy1RvvcYmO:/EXU9kmhfwZaIR+5qY5ENR/vvcFO

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks