General

  • Target

    2b9103addd66f83517888b11249dc44d_JaffaCakes118

  • Size

    573KB

  • Sample

    241009-fzyl3awfla

  • MD5

    2b9103addd66f83517888b11249dc44d

  • SHA1

    92a0fd9ae55be9eb1af2b8d5c7b55cf43899f0e0

  • SHA256

    7b5c65ae580d887398957fdeb574f54427e5dccdd0ab8cb7a9e6f91074e28b17

  • SHA512

    27e20865eea26f380c05350649d9489d6c0f19a4dd9fbcc2a7065fa060491e796480b54e596ea44f1355b91cdeb5d566e75cd2ae88198f719e62b870f18abd3d

  • SSDEEP

    12288:Aw0BXaqyCBubFFEcc48v0h5MkrbJoXrPRom433Aod72yzg4y:70KqyNtL5MkrVo7Jod3Aod5zg/

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      2b9103addd66f83517888b11249dc44d_JaffaCakes118

    • Size

      573KB

    • MD5

      2b9103addd66f83517888b11249dc44d

    • SHA1

      92a0fd9ae55be9eb1af2b8d5c7b55cf43899f0e0

    • SHA256

      7b5c65ae580d887398957fdeb574f54427e5dccdd0ab8cb7a9e6f91074e28b17

    • SHA512

      27e20865eea26f380c05350649d9489d6c0f19a4dd9fbcc2a7065fa060491e796480b54e596ea44f1355b91cdeb5d566e75cd2ae88198f719e62b870f18abd3d

    • SSDEEP

      12288:Aw0BXaqyCBubFFEcc48v0h5MkrbJoXrPRom433Aod72yzg4y:70KqyNtL5MkrVo7Jod3Aod5zg/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks