General

  • Target

    0f64e52165e8b2fd9eed789971ec941a_JaffaCakes118

  • Size

    542KB

  • Sample

    241003-szekeasfmj

  • MD5

    0f64e52165e8b2fd9eed789971ec941a

  • SHA1

    b94c460776a48954181814ca3c8f9bebe1e9beb5

  • SHA256

    e92765e6d0103f62113fa93e2c1be8e98df014bdf70d7a67a2f58afa99d9b977

  • SHA512

    a614b43be33917974d313c236a5a6c1bd4334a2ac7703b34a2887341c152c91168cc60d7c6663105ba744dc7b4a0e03f9fd55a2c650ecb5199598cee00189b71

  • SSDEEP

    12288:0snE+k3cLXmlPSMMMpe60MFzeg7X+AX1XOup9w:0uU3cLM1MV6vogbdDw

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

59d412d4f41a89a59373ec4af49c5cc46ef2eed6

Attributes
  • url4cnc

    https://telete.in/hkeeplogup1

rc4.plain
rc4.plain

Targets

    • Target

      0f64e52165e8b2fd9eed789971ec941a_JaffaCakes118

    • Size

      542KB

    • MD5

      0f64e52165e8b2fd9eed789971ec941a

    • SHA1

      b94c460776a48954181814ca3c8f9bebe1e9beb5

    • SHA256

      e92765e6d0103f62113fa93e2c1be8e98df014bdf70d7a67a2f58afa99d9b977

    • SHA512

      a614b43be33917974d313c236a5a6c1bd4334a2ac7703b34a2887341c152c91168cc60d7c6663105ba744dc7b4a0e03f9fd55a2c650ecb5199598cee00189b71

    • SSDEEP

      12288:0snE+k3cLXmlPSMMMpe60MFzeg7X+AX1XOup9w:0uU3cLM1MV6vogbdDw

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks