General

  • Target

    3e7ab409251e393090044739fb45da0f_JaffaCakes118

  • Size

    1.4MB

  • Sample

    241013-hyz5lsyepk

  • MD5

    3e7ab409251e393090044739fb45da0f

  • SHA1

    59b44982386a444bc6341dbd6b89579edffb8bec

  • SHA256

    e391c466c3b83127d5372e12868d5791763c07e13b693739b2156c74878ff7ce

  • SHA512

    01457eb69acf3fd996debb4ef8b535ebd79addb8b2040011e7b5d75587cbc7975aa280b22268e4a79fa4731883e499e314e3c535d7d44f48208d9d33a8ad27a3

  • SSDEEP

    24576:j9yStzEkEW2+gL9tTG4r2231883FZjyKWhuTfur:jc6ETLT7t318SF1yjhuTfur

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

c524886d28411e80660e573d1de51f17556d70f6

Attributes
  • url4cnc

    https://t.me/hobabastrepsils

rc4.plain
rc4.plain

Targets

    • Target

      3e7ab409251e393090044739fb45da0f_JaffaCakes118

    • Size

      1.4MB

    • MD5

      3e7ab409251e393090044739fb45da0f

    • SHA1

      59b44982386a444bc6341dbd6b89579edffb8bec

    • SHA256

      e391c466c3b83127d5372e12868d5791763c07e13b693739b2156c74878ff7ce

    • SHA512

      01457eb69acf3fd996debb4ef8b535ebd79addb8b2040011e7b5d75587cbc7975aa280b22268e4a79fa4731883e499e314e3c535d7d44f48208d9d33a8ad27a3

    • SSDEEP

      24576:j9yStzEkEW2+gL9tTG4r2231883FZjyKWhuTfur:jc6ETLT7t318SF1yjhuTfur

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks