General

  • Target

    531068090fef4f124b4b66c75d3c2635_JaffaCakes118

  • Size

    504KB

  • Sample

    241017-w2ws9a1grp

  • MD5

    531068090fef4f124b4b66c75d3c2635

  • SHA1

    6d11c82cc37984e099cabb71bb87c9ac6f5ce1b5

  • SHA256

    4db326a2737abb2f7822cebea35e82135f7577feb6ba7f0e5657afe2a0f3d0c9

  • SHA512

    a80904209ba217f0eaf217e68a576ee67ce652760e278aaf66fd31aad28659f71d2b7790a7b7744a044a29b3df71b5c1147b64602ae4d69822b58ae4a238fdb6

  • SSDEEP

    12288:OuFJ3FM5SxE/WxqdrBZ+FqZpQwqnSHKocJYrpI:OuL1MQ6jhGFwfqnSHKoc8pI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      531068090fef4f124b4b66c75d3c2635_JaffaCakes118

    • Size

      504KB

    • MD5

      531068090fef4f124b4b66c75d3c2635

    • SHA1

      6d11c82cc37984e099cabb71bb87c9ac6f5ce1b5

    • SHA256

      4db326a2737abb2f7822cebea35e82135f7577feb6ba7f0e5657afe2a0f3d0c9

    • SHA512

      a80904209ba217f0eaf217e68a576ee67ce652760e278aaf66fd31aad28659f71d2b7790a7b7744a044a29b3df71b5c1147b64602ae4d69822b58ae4a238fdb6

    • SSDEEP

      12288:OuFJ3FM5SxE/WxqdrBZ+FqZpQwqnSHKocJYrpI:OuL1MQ6jhGFwfqnSHKoc8pI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks