General

  • Target

    2cd5c79283e85326dba2f0f6390e9d9b_JaffaCakes118

  • Size

    477KB

  • Sample

    241009-hrj5tavfkh

  • MD5

    2cd5c79283e85326dba2f0f6390e9d9b

  • SHA1

    bceac54429c298b29c2eb32e750963a24a4a87b5

  • SHA256

    94ffd442633e4f89daa381496884c649d3121e41460b9082ccea5189b89d2334

  • SHA512

    9e85e924e033cbdf433d31e8d5898429a3200a95fd068d53ddc96afb3f42f01c301e6249f08797d3dba5268da74d24b00ba220f07c7ebedebbd1052f0090bd39

  • SSDEEP

    12288:pwNpVdLLAkeq5OuOtlAVbOu9hQUiI8lhC+7+gwQs6RxDY:yVdLLAhuQ5oyhIf+vwQsaY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

8a89272858125c31016bc130ad19557408b8bbe4

Attributes
  • url4cnc

    https://telete.in/jjbadb0y

rc4.plain
rc4.plain

Targets

    • Target

      2cd5c79283e85326dba2f0f6390e9d9b_JaffaCakes118

    • Size

      477KB

    • MD5

      2cd5c79283e85326dba2f0f6390e9d9b

    • SHA1

      bceac54429c298b29c2eb32e750963a24a4a87b5

    • SHA256

      94ffd442633e4f89daa381496884c649d3121e41460b9082ccea5189b89d2334

    • SHA512

      9e85e924e033cbdf433d31e8d5898429a3200a95fd068d53ddc96afb3f42f01c301e6249f08797d3dba5268da74d24b00ba220f07c7ebedebbd1052f0090bd39

    • SSDEEP

      12288:pwNpVdLLAkeq5OuOtlAVbOu9hQUiI8lhC+7+gwQs6RxDY:yVdLLAhuQ5oyhIf+vwQsaY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks