General

  • Target

    34bcb708a17bce1da7b26b6fdde6e9d0_JaffaCakes118

  • Size

    512KB

  • Sample

    241011-pflmts1gnh

  • MD5

    34bcb708a17bce1da7b26b6fdde6e9d0

  • SHA1

    4427254f092c7043dc26a4ffaaf2d118c77b1334

  • SHA256

    f2bf403d1e035c29dbc57e7fd83d3b3cbd3ad45b0eb57d80e858f2cc68d4cfe9

  • SHA512

    de47a0b6abfbe2bb6b80b56e49d717996272f71df35346bfe48a4f2dc320a93604a821196ca104f46e424e6e078bc7f3adda831fd498c76e903d6a31d0a98bb5

  • SSDEEP

    12288:Ewss63L1nNPISnMBTHzu01Nl6vfr9C5A:As6b1nNg3BTHzu01Nw9

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

fa93985ba268e1dd8b72ef392332edcba95ddd45

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      34bcb708a17bce1da7b26b6fdde6e9d0_JaffaCakes118

    • Size

      512KB

    • MD5

      34bcb708a17bce1da7b26b6fdde6e9d0

    • SHA1

      4427254f092c7043dc26a4ffaaf2d118c77b1334

    • SHA256

      f2bf403d1e035c29dbc57e7fd83d3b3cbd3ad45b0eb57d80e858f2cc68d4cfe9

    • SHA512

      de47a0b6abfbe2bb6b80b56e49d717996272f71df35346bfe48a4f2dc320a93604a821196ca104f46e424e6e078bc7f3adda831fd498c76e903d6a31d0a98bb5

    • SSDEEP

      12288:Ewss63L1nNPISnMBTHzu01Nl6vfr9C5A:As6b1nNg3BTHzu01Nw9

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks