General

  • Target

    0cab7d072a86d863030204b14704be10_JaffaCakes118

  • Size

    503KB

  • Sample

    241002-15v4cazelk

  • MD5

    0cab7d072a86d863030204b14704be10

  • SHA1

    03b780e27f512ec3566f475fb497d11d2480169b

  • SHA256

    1f2ce1ccc581d246535b9d9bb13fc8a91b65c5b41399f0ff2a83cc2fcced5728

  • SHA512

    11c82846105dd78d260533804fee9bc94efb2466a26ff79d50dd4e68aad5cb2fa5c1870238c930ba7706985a0affc81c46cb08c2a9b851a8ab0a634ccef519b0

  • SSDEEP

    6144:pu4UFPnNU+c3l7dxSwaDW92mT0Wf5jpSIdFTovB/V7HQgQiQv7c67knGyHM:pu3FPnYl7d8pEN59XFUvdzQvdI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      0cab7d072a86d863030204b14704be10_JaffaCakes118

    • Size

      503KB

    • MD5

      0cab7d072a86d863030204b14704be10

    • SHA1

      03b780e27f512ec3566f475fb497d11d2480169b

    • SHA256

      1f2ce1ccc581d246535b9d9bb13fc8a91b65c5b41399f0ff2a83cc2fcced5728

    • SHA512

      11c82846105dd78d260533804fee9bc94efb2466a26ff79d50dd4e68aad5cb2fa5c1870238c930ba7706985a0affc81c46cb08c2a9b851a8ab0a634ccef519b0

    • SSDEEP

      6144:pu4UFPnNU+c3l7dxSwaDW92mT0Wf5jpSIdFTovB/V7HQgQiQv7c67knGyHM:pu3FPnYl7d8pEN59XFUvdzQvdI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks