General

  • Target

    2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

  • Size

    483KB

  • Sample

    241009-lrm39azgla

  • MD5

    2eede1db82c0a931e1ae84dd63500c11

  • SHA1

    0d027e80282ec7df50dcdd3ee87adc41a14de616

  • SHA256

    81d1213774eac0f7f313388ee6206f7086cee9383c41385d717f61fd6b8fc9d0

  • SHA512

    f8d991ffbe838cd427ff0aca4ccb0a418f19c9a25aa49395acc08017948f5f786ea099758b0ad40c0829e6218fd8d3aeb3e1f140b6fd43887d1e1496fb98a374

  • SSDEEP

    12288:eeCILmru6xV0A2+EY2DJS0ZfoAF3eCyakS+g3qOHwoO:WILmqWEVFS0gXQ+qj

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

826994b522bdfcb5ce68df95b48acbc657312d38

Attributes
  • url4cnc

    https://telete.in/jiujitnxpastor

rc4.plain
rc4.plain

Targets

    • Target

      2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

    • Size

      483KB

    • MD5

      2eede1db82c0a931e1ae84dd63500c11

    • SHA1

      0d027e80282ec7df50dcdd3ee87adc41a14de616

    • SHA256

      81d1213774eac0f7f313388ee6206f7086cee9383c41385d717f61fd6b8fc9d0

    • SHA512

      f8d991ffbe838cd427ff0aca4ccb0a418f19c9a25aa49395acc08017948f5f786ea099758b0ad40c0829e6218fd8d3aeb3e1f140b6fd43887d1e1496fb98a374

    • SSDEEP

      12288:eeCILmru6xV0A2+EY2DJS0ZfoAF3eCyakS+g3qOHwoO:WILmqWEVFS0gXQ+qj

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks