General

  • Target

    5fb1d6a98c9a8ef8205172ef7463720c_JaffaCakes118

  • Size

    511KB

  • Sample

    241020-bsgbzssenn

  • MD5

    5fb1d6a98c9a8ef8205172ef7463720c

  • SHA1

    3b349c600a545166f45f9403b764987baee34a86

  • SHA256

    226f748b118a324625f1f4b4ed3221320cc3d41d3901eb7e79e04c0e50f743b6

  • SHA512

    46c333dab7b67919e615efce23e51d6ed1210b0bb793376ec41bf1da51ff311dccad9d04c718cda75d82885c4b2dcd6db814a25f529023218786eb4da11d2dee

  • SSDEEP

    12288:o5EPhra5Qhgij4vbnMcNk1307pfL53Kw1x9MUNfnj9C5GFrX:QERhx4wakUTd1cUNfj9jF7

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

fa93985ba268e1dd8b72ef392332edcba95ddd45

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      5fb1d6a98c9a8ef8205172ef7463720c_JaffaCakes118

    • Size

      511KB

    • MD5

      5fb1d6a98c9a8ef8205172ef7463720c

    • SHA1

      3b349c600a545166f45f9403b764987baee34a86

    • SHA256

      226f748b118a324625f1f4b4ed3221320cc3d41d3901eb7e79e04c0e50f743b6

    • SHA512

      46c333dab7b67919e615efce23e51d6ed1210b0bb793376ec41bf1da51ff311dccad9d04c718cda75d82885c4b2dcd6db814a25f529023218786eb4da11d2dee

    • SSDEEP

      12288:o5EPhra5Qhgij4vbnMcNk1307pfL53Kw1x9MUNfnj9C5GFrX:QERhx4wakUTd1cUNfj9jF7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks