General

  • Target

    3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

  • Size

    503KB

  • Sample

    241013-h3ttdsvbmd

  • MD5

    3e817c73034529dfd8f8ada1862c7e3e

  • SHA1

    fa3d82544d00db105e98d46b51578fc46e2c1eb7

  • SHA256

    a3b39be8c42e45beedebf1c819fa5f7e3c1f195fe104ddf83c2a12804c2d5a51

  • SHA512

    c088dbb8991f18a24cf5cc3c1ab81e700aac87b4d2c2bf00087e0a8f7ea29ca7f3cc707501c56ab553847a099c5f492890e7f24d6394f7b31f6f9ab0d579f801

  • SSDEEP

    6144:Y9+dnfpe6txHjCfXsYJ8Awyu1pRyjPqAG7Ni5yDp6UZzpntuiih7knGyHM:YgkSxDCfXsY2yeQPqzQ5A6UZzRQ/I

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

    • Size

      503KB

    • MD5

      3e817c73034529dfd8f8ada1862c7e3e

    • SHA1

      fa3d82544d00db105e98d46b51578fc46e2c1eb7

    • SHA256

      a3b39be8c42e45beedebf1c819fa5f7e3c1f195fe104ddf83c2a12804c2d5a51

    • SHA512

      c088dbb8991f18a24cf5cc3c1ab81e700aac87b4d2c2bf00087e0a8f7ea29ca7f3cc707501c56ab553847a099c5f492890e7f24d6394f7b31f6f9ab0d579f801

    • SSDEEP

      6144:Y9+dnfpe6txHjCfXsYJ8Awyu1pRyjPqAG7Ni5yDp6UZzpntuiih7knGyHM:YgkSxDCfXsY2yeQPqzQ5A6UZzRQ/I

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks