General

  • Target

    56e898535905db881f877ee10efc4807_JaffaCakes118

  • Size

    503KB

  • Sample

    241018-mekm2avamr

  • MD5

    56e898535905db881f877ee10efc4807

  • SHA1

    5cd489732e7b8f4ae32eef64fb46e17ce5600b59

  • SHA256

    229e3a66dc45f2a203e26ff364669b43e28ab5fb9aa4c5d560fb30751d8d67f5

  • SHA512

    7426ad120a81de748d2bfc1f9e107b03100beeb50dc25fe61c4c37ab3446f29bf22f930035d58b3d3225fea306ff6023f9ea97ae8abea5b32f75186cf3082d28

  • SSDEEP

    12288:lZRci2MekWbmZcAIMOAtPQZl7aBjOQZ5i7I:lbxWbSFOgQLaJOB7I

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      56e898535905db881f877ee10efc4807_JaffaCakes118

    • Size

      503KB

    • MD5

      56e898535905db881f877ee10efc4807

    • SHA1

      5cd489732e7b8f4ae32eef64fb46e17ce5600b59

    • SHA256

      229e3a66dc45f2a203e26ff364669b43e28ab5fb9aa4c5d560fb30751d8d67f5

    • SHA512

      7426ad120a81de748d2bfc1f9e107b03100beeb50dc25fe61c4c37ab3446f29bf22f930035d58b3d3225fea306ff6023f9ea97ae8abea5b32f75186cf3082d28

    • SSDEEP

      12288:lZRci2MekWbmZcAIMOAtPQZl7aBjOQZ5i7I:lbxWbSFOgQLaJOB7I

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks