General

  • Target

    54f514d1a984a45bfa635e33b6e097a1_JaffaCakes118

  • Size

    412KB

  • Sample

    241018-ctys4athjn

  • MD5

    54f514d1a984a45bfa635e33b6e097a1

  • SHA1

    e0f6e3bda3739865125f62bebcdc6457af32bf9c

  • SHA256

    5bdacdc106dccb1068826353c41ec72f533718cf09a398a0b5966f40d9863165

  • SHA512

    01a09ae8e67522cb68075fe731778e94898366daf8e0f027b4aba2b05641092fa1f43cd0d9a3df638fe065105bf46f3e1fab38e05a9d4637c9312d778ca3d378

  • SSDEEP

    12288:q5VcdY1POjU8cB06VtORB1tDT8Qk7MQnELO:RAPBBFVtqtDTDk7XE

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

e593428d572f64087cbbaacf2f970ff1f26a86b7

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      54f514d1a984a45bfa635e33b6e097a1_JaffaCakes118

    • Size

      412KB

    • MD5

      54f514d1a984a45bfa635e33b6e097a1

    • SHA1

      e0f6e3bda3739865125f62bebcdc6457af32bf9c

    • SHA256

      5bdacdc106dccb1068826353c41ec72f533718cf09a398a0b5966f40d9863165

    • SHA512

      01a09ae8e67522cb68075fe731778e94898366daf8e0f027b4aba2b05641092fa1f43cd0d9a3df638fe065105bf46f3e1fab38e05a9d4637c9312d778ca3d378

    • SSDEEP

      12288:q5VcdY1POjU8cB06VtORB1tDT8Qk7MQnELO:RAPBBFVtqtDTDk7XE

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks