General

  • Target

    0989d841317e8f9eb898109da3522ee9_JaffaCakes118

  • Size

    492KB

  • Sample

    241002-h94beatgkj

  • MD5

    0989d841317e8f9eb898109da3522ee9

  • SHA1

    7845ba2f0729551d5727df543dde4f5f83570cd5

  • SHA256

    40e829d512e1ec1609630f7db4c2799a93c1f0d01ad069982b67d4d713749e97

  • SHA512

    6b7c0dbba04c26a3edd8313f8dbcf4e1c2e9a611ab2e43d29729cb1c4c38c9cec593558b5277dabb9bb593a67b837ea5d89a0b1c3ae04f562cba54d016f2c08e

  • SSDEEP

    12288:B/M4sJZglmilFsKHLrl9bBi+s5oGtMkHjFaSyIYXhI:B/MNKm8sU19bBz4MkHjFaNXhI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      0989d841317e8f9eb898109da3522ee9_JaffaCakes118

    • Size

      492KB

    • MD5

      0989d841317e8f9eb898109da3522ee9

    • SHA1

      7845ba2f0729551d5727df543dde4f5f83570cd5

    • SHA256

      40e829d512e1ec1609630f7db4c2799a93c1f0d01ad069982b67d4d713749e97

    • SHA512

      6b7c0dbba04c26a3edd8313f8dbcf4e1c2e9a611ab2e43d29729cb1c4c38c9cec593558b5277dabb9bb593a67b837ea5d89a0b1c3ae04f562cba54d016f2c08e

    • SSDEEP

      12288:B/M4sJZglmilFsKHLrl9bBi+s5oGtMkHjFaSyIYXhI:B/MNKm8sU19bBz4MkHjFaNXhI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks