General

  • Target

    2cc6d4f1c214e4d44d078773dc5469d0_JaffaCakes118

  • Size

    523KB

  • Sample

    241009-hnwpfa1bkm

  • MD5

    2cc6d4f1c214e4d44d078773dc5469d0

  • SHA1

    6dc7a3ebc447aa9b4edb14b670452336c110e646

  • SHA256

    dfe17befba0a9abd5a9f8db647be53e6a8dbfc8e2ba9b217088714a5eff7ed70

  • SHA512

    d825c537075e2d9149647d2782c98a197dd6cec1319d2ce0101004781344c6299dd0f1010f37fb51cc2694c0066d01c02bd1261f503dda18ceef0b9eb6f5453f

  • SSDEEP

    12288:9Eb30yBuJCyE2sRDJ/I31iCbjnB3iR4yYorKQbYIVKC:m0yB1OiCbL+4yYKYIg

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      2cc6d4f1c214e4d44d078773dc5469d0_JaffaCakes118

    • Size

      523KB

    • MD5

      2cc6d4f1c214e4d44d078773dc5469d0

    • SHA1

      6dc7a3ebc447aa9b4edb14b670452336c110e646

    • SHA256

      dfe17befba0a9abd5a9f8db647be53e6a8dbfc8e2ba9b217088714a5eff7ed70

    • SHA512

      d825c537075e2d9149647d2782c98a197dd6cec1319d2ce0101004781344c6299dd0f1010f37fb51cc2694c0066d01c02bd1261f503dda18ceef0b9eb6f5453f

    • SSDEEP

      12288:9Eb30yBuJCyE2sRDJ/I31iCbjnB3iR4yYorKQbYIVKC:m0yB1OiCbL+4yYKYIg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks