General

  • Target

    15a6ceab14602e5972efc127145460ff_JaffaCakes118

  • Size

    511KB

  • Sample

    241005-bykatsxfrq

  • MD5

    15a6ceab14602e5972efc127145460ff

  • SHA1

    0fd6c0eeda03c5650b41a078614ea8af6adb4c81

  • SHA256

    3683d5f3b4dbb6076ff5e8d6d6528e1a1a8987fed717eab3e96cb9809310c9f1

  • SHA512

    689c3d6fa4f714b22473b05d18b8feadb73bc1b48b744816c85889c9c0b152ad164019c65458e82af6cf769c51c43ae82f79c3c904d74494dbe85f05a96f71af

  • SSDEEP

    12288:+sSm11Kq6B9PtohNY2U21KwWdWZdEL2ReL9C5iF:+sSm7KHP+NY2U1Ck9

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

39b871ed120e56ecbdc546b8a8a78c4e5516bc1f

Attributes
  • url4cnc

    https://telete.in/uiopoppiscess

rc4.plain
rc4.plain

Targets

    • Target

      15a6ceab14602e5972efc127145460ff_JaffaCakes118

    • Size

      511KB

    • MD5

      15a6ceab14602e5972efc127145460ff

    • SHA1

      0fd6c0eeda03c5650b41a078614ea8af6adb4c81

    • SHA256

      3683d5f3b4dbb6076ff5e8d6d6528e1a1a8987fed717eab3e96cb9809310c9f1

    • SHA512

      689c3d6fa4f714b22473b05d18b8feadb73bc1b48b744816c85889c9c0b152ad164019c65458e82af6cf769c51c43ae82f79c3c904d74494dbe85f05a96f71af

    • SSDEEP

      12288:+sSm11Kq6B9PtohNY2U21KwWdWZdEL2ReL9C5iF:+sSm7KHP+NY2U1Ck9

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks