General

  • Target

    3be2bd0819b19f5fc64a2468fb3ee923_JaffaCakes118

  • Size

    556KB

  • Sample

    241012-y8c1tszclg

  • MD5

    3be2bd0819b19f5fc64a2468fb3ee923

  • SHA1

    e1604f36709e1a34475efc56f555005d9dc07a53

  • SHA256

    9dc0631ea1726b49d0e25b634b6e57253951088f4d007b00407118fcd82fa272

  • SHA512

    53a853e21cf02c0e70c5967aa9199904d323d70e8786b1f6d6e593f52574a940e66c80798caec73bdef936978c278bc7f12dbcaf9b8cd551a3602cee678de01e

  • SSDEEP

    12288:1CijltUIISGjdsypvuGW9fJ0ig6WQBNI/WTGiuDyOW:1htUIdxBC/knqW

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      3be2bd0819b19f5fc64a2468fb3ee923_JaffaCakes118

    • Size

      556KB

    • MD5

      3be2bd0819b19f5fc64a2468fb3ee923

    • SHA1

      e1604f36709e1a34475efc56f555005d9dc07a53

    • SHA256

      9dc0631ea1726b49d0e25b634b6e57253951088f4d007b00407118fcd82fa272

    • SHA512

      53a853e21cf02c0e70c5967aa9199904d323d70e8786b1f6d6e593f52574a940e66c80798caec73bdef936978c278bc7f12dbcaf9b8cd551a3602cee678de01e

    • SSDEEP

      12288:1CijltUIISGjdsypvuGW9fJ0ig6WQBNI/WTGiuDyOW:1htUIdxBC/knqW

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks