General

  • Target

    f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

  • Size

    510KB

  • Sample

    240924-1vyfqa1cjf

  • MD5

    f4950d0ab093fcb3cedd0b4333e55c27

  • SHA1

    0093fe7d895d942d5f6486cdc0d0b7c413e497f7

  • SHA256

    25a718d24e04f5b7bfce0ceb2c073b5d5fdd1809d448ffc8f4fa0a2a9d9190ad

  • SHA512

    1fff63cd372a020774fc7bac1aa960b3ac27fe30ea846a77f5ee5f198120738ac21a4bc58c35ca7c9f8dc37a8fe0c7616291ead399c882f4755ed08079f88f65

  • SSDEEP

    12288:5joVTBdpkrjaXa18aubb+9xb/hKhFmwSflOPn:yvv0GZaU+DhKhFmfO

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

ba9d5e6ba2ad40b248bebad44cbd1392c7d8840a

Attributes
  • url4cnc

    https://tttttt.me/ackinreik3

rc4.plain
rc4.plain

Targets

    • Target

      f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

    • Size

      510KB

    • MD5

      f4950d0ab093fcb3cedd0b4333e55c27

    • SHA1

      0093fe7d895d942d5f6486cdc0d0b7c413e497f7

    • SHA256

      25a718d24e04f5b7bfce0ceb2c073b5d5fdd1809d448ffc8f4fa0a2a9d9190ad

    • SHA512

      1fff63cd372a020774fc7bac1aa960b3ac27fe30ea846a77f5ee5f198120738ac21a4bc58c35ca7c9f8dc37a8fe0c7616291ead399c882f4755ed08079f88f65

    • SSDEEP

      12288:5joVTBdpkrjaXa18aubb+9xb/hKhFmwSflOPn:yvv0GZaU+DhKhFmfO

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks