General

  • Target

    504d4269c0f3b42adc25e8979f31c294_JaffaCakes118

  • Size

    556KB

  • Sample

    241017-cpxp8sxbqd

  • MD5

    504d4269c0f3b42adc25e8979f31c294

  • SHA1

    77cfb6e2e994cbf60cd459f53d9240efa38c7429

  • SHA256

    76c2e3afa7f0a8f45c84517763a838292b92768e88c7c801f2b8e8ef2381e907

  • SHA512

    60f0af12c7e0f3568e90456b4e55c6d9abe0b2fb8c6130fbd3cab4abb3a72b81251d13bd142dbe26139076370d45a0c4024bc106530069d1ac96e5befe859cc6

  • SSDEEP

    12288:UHulXgwHq5aVlcy4RLpjypP+iIz3TWcGMBIAQxFofEzghF:UQgwHSpj4+foFwEG

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      504d4269c0f3b42adc25e8979f31c294_JaffaCakes118

    • Size

      556KB

    • MD5

      504d4269c0f3b42adc25e8979f31c294

    • SHA1

      77cfb6e2e994cbf60cd459f53d9240efa38c7429

    • SHA256

      76c2e3afa7f0a8f45c84517763a838292b92768e88c7c801f2b8e8ef2381e907

    • SHA512

      60f0af12c7e0f3568e90456b4e55c6d9abe0b2fb8c6130fbd3cab4abb3a72b81251d13bd142dbe26139076370d45a0c4024bc106530069d1ac96e5befe859cc6

    • SSDEEP

      12288:UHulXgwHq5aVlcy4RLpjypP+iIz3TWcGMBIAQxFofEzghF:UQgwHSpj4+foFwEG

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks