General

  • Target

    16c5e3ca5e219a44a92927bacb6a36d1_JaffaCakes118

  • Size

    557KB

  • Sample

    241005-jhwmxsxenc

  • MD5

    16c5e3ca5e219a44a92927bacb6a36d1

  • SHA1

    4bad0e798f7e883721e894429ee46a33925f76c5

  • SHA256

    bdb12e8227f12fc06392f619e23e9bef8fef74dc637027bfad13b0e4ee02af8a

  • SHA512

    94da5d1f62443f75bd0fb25c397f7c70b004ed56d0d2cf025108ded95bbc906ad4fd96052ec99223874c8e861df7a97682b6b821b0b78b528e6744ec912ecc1a

  • SSDEEP

    12288:JeLBQBgFzcVyvFd/qHSaQzP5pL5/pYJtthTaan0x8L4O:J3BgF+H2pXYDtxn0x3O

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      16c5e3ca5e219a44a92927bacb6a36d1_JaffaCakes118

    • Size

      557KB

    • MD5

      16c5e3ca5e219a44a92927bacb6a36d1

    • SHA1

      4bad0e798f7e883721e894429ee46a33925f76c5

    • SHA256

      bdb12e8227f12fc06392f619e23e9bef8fef74dc637027bfad13b0e4ee02af8a

    • SHA512

      94da5d1f62443f75bd0fb25c397f7c70b004ed56d0d2cf025108ded95bbc906ad4fd96052ec99223874c8e861df7a97682b6b821b0b78b528e6744ec912ecc1a

    • SSDEEP

      12288:JeLBQBgFzcVyvFd/qHSaQzP5pL5/pYJtthTaan0x8L4O:J3BgF+H2pXYDtxn0x3O

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks