General

  • Target

    28477db32ba7f651b5319037a6900bf9_JaffaCakes118

  • Size

    562KB

  • Sample

    241009-bl765axekn

  • MD5

    28477db32ba7f651b5319037a6900bf9

  • SHA1

    17e89351ac8e24b82eea8ae9f6538714b0d014a1

  • SHA256

    0a122a9c5b9ca7f66424aa64cdb7dc9c5d4093583e9afb89a26c6dd0f6587ea3

  • SHA512

    707834add5fb39c8a9e3091e8ef867381729b11d8a48bcbd65c0e9ffa355ee33db222f37d2de539981da83b1c76b57a214663d039d14fdf5127797ff21630393

  • SSDEEP

    12288:8Jg/7N47X+Ijsg84HFT18Q4/fhhBP6VXW6T2zcDd4q4e462:d7N4jh6bbByVRTL4FNb

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      28477db32ba7f651b5319037a6900bf9_JaffaCakes118

    • Size

      562KB

    • MD5

      28477db32ba7f651b5319037a6900bf9

    • SHA1

      17e89351ac8e24b82eea8ae9f6538714b0d014a1

    • SHA256

      0a122a9c5b9ca7f66424aa64cdb7dc9c5d4093583e9afb89a26c6dd0f6587ea3

    • SHA512

      707834add5fb39c8a9e3091e8ef867381729b11d8a48bcbd65c0e9ffa355ee33db222f37d2de539981da83b1c76b57a214663d039d14fdf5127797ff21630393

    • SSDEEP

      12288:8Jg/7N47X+Ijsg84HFT18Q4/fhhBP6VXW6T2zcDd4q4e462:d7N4jh6bbByVRTL4FNb

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks