General

  • Target

    59d582545723254c57de8738f7ae36cc_JaffaCakes118

  • Size

    509KB

  • Sample

    241018-3ln7ssweqp

  • MD5

    59d582545723254c57de8738f7ae36cc

  • SHA1

    b89b154a4b112a19fd232bc612539b82ad561a4a

  • SHA256

    b9fde756928ad944f39c065452565739e6f1102b9ded9ee17f1c188e9191571a

  • SHA512

    54b7b5ebedde0d2e36fdd7f8caab7f275e0b8f5f89830e67a4c3981cd7d66d1f1bb5cb43047b3feeb4aa75b6838a2f56fc78ffea24b4b4c803dd48e8c6a728a7

  • SSDEEP

    12288:vGTjs4zTbVu1tzMOgris/b6+XwsOvvuhSejRZCc2Lv:vGXs4zTRur3GXbvpO+se7MLv

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

3709cc105f3e0f0b01ffe5c558c34d19d8dc07bc

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      59d582545723254c57de8738f7ae36cc_JaffaCakes118

    • Size

      509KB

    • MD5

      59d582545723254c57de8738f7ae36cc

    • SHA1

      b89b154a4b112a19fd232bc612539b82ad561a4a

    • SHA256

      b9fde756928ad944f39c065452565739e6f1102b9ded9ee17f1c188e9191571a

    • SHA512

      54b7b5ebedde0d2e36fdd7f8caab7f275e0b8f5f89830e67a4c3981cd7d66d1f1bb5cb43047b3feeb4aa75b6838a2f56fc78ffea24b4b4c803dd48e8c6a728a7

    • SSDEEP

      12288:vGTjs4zTbVu1tzMOgris/b6+XwsOvvuhSejRZCc2Lv:vGXs4zTRur3GXbvpO+se7MLv

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks