General

  • Target

    4c8e1603a7cce8c9d09599d40c8e081f_JaffaCakes118

  • Size

    475KB

  • Sample

    241016-nahtbazgkr

  • MD5

    4c8e1603a7cce8c9d09599d40c8e081f

  • SHA1

    6b1ae418b461ad825eb19217e405558a6c949394

  • SHA256

    1e1d3a8f3136ead69aed6bd8166c9ca0eccaf7667de449572e7c96417e7d5f57

  • SHA512

    2dc079fce4ad786b8b7ec2aa1a94692fb4e49399634f09a59920709c3e486ea6504fb3f8a8db06ba0da51d0773cbca4a888f5ef2363f3465e87ccb3051461e11

  • SSDEEP

    12288:09JTzLDUVPhgKMc7CqAiABPuddPG/C+UPlowoO:09JTzwPqKv7C0GPuPY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

8698be2e7e5a4e7e4dc8cd71c3845a10c60398c6

Attributes
  • url4cnc

    https://telete.in/youyouhell0world

rc4.plain
rc4.plain

Targets

    • Target

      4c8e1603a7cce8c9d09599d40c8e081f_JaffaCakes118

    • Size

      475KB

    • MD5

      4c8e1603a7cce8c9d09599d40c8e081f

    • SHA1

      6b1ae418b461ad825eb19217e405558a6c949394

    • SHA256

      1e1d3a8f3136ead69aed6bd8166c9ca0eccaf7667de449572e7c96417e7d5f57

    • SHA512

      2dc079fce4ad786b8b7ec2aa1a94692fb4e49399634f09a59920709c3e486ea6504fb3f8a8db06ba0da51d0773cbca4a888f5ef2363f3465e87ccb3051461e11

    • SSDEEP

      12288:09JTzLDUVPhgKMc7CqAiABPuddPG/C+UPlowoO:09JTzwPqKv7C0GPuPY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks