General

  • Target

    3fe5f8b4231edc98d0faa3c41f60639b_JaffaCakes118

  • Size

    504KB

  • Sample

    241013-pt81aawhnc

  • MD5

    3fe5f8b4231edc98d0faa3c41f60639b

  • SHA1

    fec6b6455400038f7ef32c4d67ad7e8effaf8683

  • SHA256

    72aced48c0daeb114c201a6b2268310812c8d674eea9ecf441dd06b32914eb19

  • SHA512

    7b364fa7d8fefcb61e4b15b5f0c95b84a438d9eee2cc6464d5fc3febfee589ba832a48d9586bc67834d9b861f4c83ab33bf2ee935ae754fe4f5fd95e7a57586b

  • SSDEEP

    12288:v+G3U4Xt/YceQyz0Oy17YL3g1DZK32Q8ggVI:ve49/X1zOA7Y7ycG+2I

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      3fe5f8b4231edc98d0faa3c41f60639b_JaffaCakes118

    • Size

      504KB

    • MD5

      3fe5f8b4231edc98d0faa3c41f60639b

    • SHA1

      fec6b6455400038f7ef32c4d67ad7e8effaf8683

    • SHA256

      72aced48c0daeb114c201a6b2268310812c8d674eea9ecf441dd06b32914eb19

    • SHA512

      7b364fa7d8fefcb61e4b15b5f0c95b84a438d9eee2cc6464d5fc3febfee589ba832a48d9586bc67834d9b861f4c83ab33bf2ee935ae754fe4f5fd95e7a57586b

    • SSDEEP

      12288:v+G3U4Xt/YceQyz0Oy17YL3g1DZK32Q8ggVI:ve49/X1zOA7Y7ycG+2I

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks