General

  • Target

    60eed08bdc53986d9043451245b35496_JaffaCakes118

  • Size

    10.5MB

  • Sample

    241020-hr9epsvenc

  • MD5

    60eed08bdc53986d9043451245b35496

  • SHA1

    eb95c43e9090ba5259274b679bf4de24fd629c6f

  • SHA256

    8447fcdd082afb9a2432a14609d924bed51a6acd45464f60eba697a2189e9b5a

  • SHA512

    ddffeb4693f738190b2514b3be96f0665eb0b147b732e026afc7247666428935351e8dbbbda7fca597efac2b060cd259e76788244cf35064c5f60f36e2514875

  • SSDEEP

    98304:a1Hs3oV4DoiaQZlYgYHvA2+V5tAXeoz2yrvM0pbhm6RPCEVZkz4YbRlfcHVQ2khD:a1M484gYGVMRHmQPTZTIbcHVSD

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

bb8d3701ca5d8e031967c87b862623b34997b3d1

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      60eed08bdc53986d9043451245b35496_JaffaCakes118

    • Size

      10.5MB

    • MD5

      60eed08bdc53986d9043451245b35496

    • SHA1

      eb95c43e9090ba5259274b679bf4de24fd629c6f

    • SHA256

      8447fcdd082afb9a2432a14609d924bed51a6acd45464f60eba697a2189e9b5a

    • SHA512

      ddffeb4693f738190b2514b3be96f0665eb0b147b732e026afc7247666428935351e8dbbbda7fca597efac2b060cd259e76788244cf35064c5f60f36e2514875

    • SSDEEP

      98304:a1Hs3oV4DoiaQZlYgYHvA2+V5tAXeoz2yrvM0pbhm6RPCEVZkz4YbRlfcHVQ2khD:a1M484gYGVMRHmQPTZTIbcHVSD

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks