General

  • Target

    355c70e0db090f30fd4a908b39629e0a_JaffaCakes118

  • Size

    466KB

  • Sample

    241011-r6h1qsshkq

  • MD5

    355c70e0db090f30fd4a908b39629e0a

  • SHA1

    95841e9ce3b6142815e04c028af9a6f2e6c043dc

  • SHA256

    503289f727c870188564636eebe70560eada65ab9a0676b58407fcd6c45a3928

  • SHA512

    ed108e90646f55c61124db01dd564e159e5ac7bd74f04d0ec1cdb44de94fd4bc0c5eee75aa63805e4b8f6fc456b3438d7f9a539c5747543ec21e2d4fc6f588c9

  • SSDEEP

    12288:BmIuGqCTT/b1u7blYfcsQJKH6bTWc+Y0OYMOQi:RuGr/huXAUS6bauKQi

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

022f7f19749a47aa4d6a10b25bfd352ecb963373

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      355c70e0db090f30fd4a908b39629e0a_JaffaCakes118

    • Size

      466KB

    • MD5

      355c70e0db090f30fd4a908b39629e0a

    • SHA1

      95841e9ce3b6142815e04c028af9a6f2e6c043dc

    • SHA256

      503289f727c870188564636eebe70560eada65ab9a0676b58407fcd6c45a3928

    • SHA512

      ed108e90646f55c61124db01dd564e159e5ac7bd74f04d0ec1cdb44de94fd4bc0c5eee75aa63805e4b8f6fc456b3438d7f9a539c5747543ec21e2d4fc6f588c9

    • SSDEEP

      12288:BmIuGqCTT/b1u7blYfcsQJKH6bTWc+Y0OYMOQi:RuGr/huXAUS6bauKQi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks