General

  • Target

    f8e8da4bcb00ac0f4c52392719c7361e_JaffaCakes118

  • Size

    637KB

  • Sample

    240926-wflfdsshna

  • MD5

    f8e8da4bcb00ac0f4c52392719c7361e

  • SHA1

    accedfe263fca73d78eab360f7afe9d131b062bd

  • SHA256

    97efb8b6fc0c9b84e02a02372ec9e6b0bfb95cadd63d9941d7815d58adc5849e

  • SHA512

    aa3614c91419afdcfb7f8ae0bc603580289434d439d0f6fed31c5ea4ab97ba7beb5973f7560f4f12ea0bdf5cea842ff84cf8f587b7bf79e182ba378df22a07e5

  • SSDEEP

    12288:fBkZSz9rGUB1dn/ydLhWKJYBp7AtK/Gl91dmdLG8kOwCDA:feSzZGUBeZcGYPMeG8k/y

Malware Config

Extracted

Family

raccoon

Botnet

89379f5371f470435351b0d002d50f28a65fff02

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1jN5ZmsLRZEQEtxsUIIVXnSOKaqBdnX6Z

rc4.plain
rc4.plain

Targets

    • Target

      f8e8da4bcb00ac0f4c52392719c7361e_JaffaCakes118

    • Size

      637KB

    • MD5

      f8e8da4bcb00ac0f4c52392719c7361e

    • SHA1

      accedfe263fca73d78eab360f7afe9d131b062bd

    • SHA256

      97efb8b6fc0c9b84e02a02372ec9e6b0bfb95cadd63d9941d7815d58adc5849e

    • SHA512

      aa3614c91419afdcfb7f8ae0bc603580289434d439d0f6fed31c5ea4ab97ba7beb5973f7560f4f12ea0bdf5cea842ff84cf8f587b7bf79e182ba378df22a07e5

    • SSDEEP

      12288:fBkZSz9rGUB1dn/ydLhWKJYBp7AtK/Gl91dmdLG8kOwCDA:feSzZGUBeZcGYPMeG8k/y

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks