General

  • Target

    36be70d548f9f23f0afc0ef6b3c5155e_JaffaCakes118

  • Size

    566KB

  • Sample

    241011-zngc7atapb

  • MD5

    36be70d548f9f23f0afc0ef6b3c5155e

  • SHA1

    22f98051863bbaa13ac1ca349470d9463ac63a55

  • SHA256

    48ba5b838792bed9d4194a750ffe6ec30df56b27973d3572fa0f7bd1c6cfa470

  • SHA512

    09e88821ca6fc3ea39fe32adbbaeb3f5f7265002e3d9b6c47454d4da2c9cc037e722adf73ec0d8b36763d67101fed7893fa8048d1bc0c4a904f502831240012d

  • SSDEEP

    12288:rkzVMqH0gsUBlYWQnPSpjiOgXqh/Q4AucW2WeT1dNDBZ4:rAS+0gXOv69Q4TreTTPZ4

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      36be70d548f9f23f0afc0ef6b3c5155e_JaffaCakes118

    • Size

      566KB

    • MD5

      36be70d548f9f23f0afc0ef6b3c5155e

    • SHA1

      22f98051863bbaa13ac1ca349470d9463ac63a55

    • SHA256

      48ba5b838792bed9d4194a750ffe6ec30df56b27973d3572fa0f7bd1c6cfa470

    • SHA512

      09e88821ca6fc3ea39fe32adbbaeb3f5f7265002e3d9b6c47454d4da2c9cc037e722adf73ec0d8b36763d67101fed7893fa8048d1bc0c4a904f502831240012d

    • SSDEEP

      12288:rkzVMqH0gsUBlYWQnPSpjiOgXqh/Q4AucW2WeT1dNDBZ4:rAS+0gXOv69Q4TreTTPZ4

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks