General

  • Target

    4a6ffa3f9bfc6a6f5a6b31a1348f2f48_JaffaCakes118

  • Size

    469KB

  • Sample

    241015-269tkawenp

  • MD5

    4a6ffa3f9bfc6a6f5a6b31a1348f2f48

  • SHA1

    228f61db4018de629d34f20be80afef10fa8aaca

  • SHA256

    64c1dfd4d78c54982f2908ecb8a61479adb6dd75a68c2ace5617d9a8de482298

  • SHA512

    2b08a6c9ba528856fa529303d5629f96d40017c575dbacb940a361b51c6442ec3f82175d7d24f712c67687264951be3f846282b67d226eb139fdf7189b52fa72

  • SSDEEP

    12288:9wvFw66QyGc1R3EQND2ki7+lYbNhZjrO1i:UFw66jR1RxNSHxrjoi

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      4a6ffa3f9bfc6a6f5a6b31a1348f2f48_JaffaCakes118

    • Size

      469KB

    • MD5

      4a6ffa3f9bfc6a6f5a6b31a1348f2f48

    • SHA1

      228f61db4018de629d34f20be80afef10fa8aaca

    • SHA256

      64c1dfd4d78c54982f2908ecb8a61479adb6dd75a68c2ace5617d9a8de482298

    • SHA512

      2b08a6c9ba528856fa529303d5629f96d40017c575dbacb940a361b51c6442ec3f82175d7d24f712c67687264951be3f846282b67d226eb139fdf7189b52fa72

    • SSDEEP

      12288:9wvFw66QyGc1R3EQND2ki7+lYbNhZjrO1i:UFw66jR1RxNSHxrjoi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks