General

  • Target

    41619ea1d40148a4fb7a92c29d31acc1_JaffaCakes118

  • Size

    556KB

  • Sample

    241013-w2havs1ckg

  • MD5

    41619ea1d40148a4fb7a92c29d31acc1

  • SHA1

    8efa3d839e66527ff47bd8f57847cc7d485d4210

  • SHA256

    806ed2c49bd059dced46432ab56ba22b0a79af0933d999ce86ee95507b9009b8

  • SHA512

    eb26a28e510116e052f7dd718cb3a72c2620a44ff1beed970d58cd85f440561989f433cb6f158e5101c0c504fcbbc76450776dc6792b426de8912a08cfc94d71

  • SSDEEP

    12288:T0VUevTefSombCDFhVWsegV7lAksdojcDGvqIV:TIvTe5WsegUDGvqIV

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      41619ea1d40148a4fb7a92c29d31acc1_JaffaCakes118

    • Size

      556KB

    • MD5

      41619ea1d40148a4fb7a92c29d31acc1

    • SHA1

      8efa3d839e66527ff47bd8f57847cc7d485d4210

    • SHA256

      806ed2c49bd059dced46432ab56ba22b0a79af0933d999ce86ee95507b9009b8

    • SHA512

      eb26a28e510116e052f7dd718cb3a72c2620a44ff1beed970d58cd85f440561989f433cb6f158e5101c0c504fcbbc76450776dc6792b426de8912a08cfc94d71

    • SSDEEP

      12288:T0VUevTefSombCDFhVWsegV7lAksdojcDGvqIV:TIvTe5WsegUDGvqIV

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks