General

  • Target

    52148b233ae8fab9b279d9e74b839653_JaffaCakes118

  • Size

    459KB

  • Sample

    241017-pvc91axfje

  • MD5

    52148b233ae8fab9b279d9e74b839653

  • SHA1

    144a329535ea66a6b68a7dd67f428868422610ae

  • SHA256

    67a911fbc6ee2ccf62001fd54f453b64fa54c9bc65770e998b609fecf523242f

  • SHA512

    7839b26b636b38587b417d3853eddd0e2960f865a95c6bdda6ac0451dd4aa534b0f90fecc4988fbef98d5ba23cf9fb964b74e08614ad5267e05b1c4793ae06ef

  • SSDEEP

    12288:HX+cyB4ipp7upOP+idHHwu0xnqyx8+ZXw2RcNxrY:H44ipp7cOP+y5AnDe+ZXgNxrY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      52148b233ae8fab9b279d9e74b839653_JaffaCakes118

    • Size

      459KB

    • MD5

      52148b233ae8fab9b279d9e74b839653

    • SHA1

      144a329535ea66a6b68a7dd67f428868422610ae

    • SHA256

      67a911fbc6ee2ccf62001fd54f453b64fa54c9bc65770e998b609fecf523242f

    • SHA512

      7839b26b636b38587b417d3853eddd0e2960f865a95c6bdda6ac0451dd4aa534b0f90fecc4988fbef98d5ba23cf9fb964b74e08614ad5267e05b1c4793ae06ef

    • SSDEEP

      12288:HX+cyB4ipp7upOP+idHHwu0xnqyx8+ZXw2RcNxrY:H44ipp7cOP+y5AnDe+ZXgNxrY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks