General

  • Target

    61debeeaa664d8da1d895749ca13f932_JaffaCakes118

  • Size

    504KB

  • Sample

    241020-m1lgfswerq

  • MD5

    61debeeaa664d8da1d895749ca13f932

  • SHA1

    aa0ee173649f0d0e16fdf42c5ce54049dab4acd9

  • SHA256

    29924af043739881674c7d7ac9d2d08a5021e41484a49f28ee43d253cb9e3be7

  • SHA512

    6858e239d997fbcb9ca8a4585e44d895d914f970f27852a0eaef2f77ed3505510dcb61d9aa07a6c7e50636144b4efaba099523db00063b09491b13a8343432b7

  • SSDEEP

    12288:24NvWXvrIjkAp78k+or6GcLuSEYSIGoI:2IcvokHormLsQI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      61debeeaa664d8da1d895749ca13f932_JaffaCakes118

    • Size

      504KB

    • MD5

      61debeeaa664d8da1d895749ca13f932

    • SHA1

      aa0ee173649f0d0e16fdf42c5ce54049dab4acd9

    • SHA256

      29924af043739881674c7d7ac9d2d08a5021e41484a49f28ee43d253cb9e3be7

    • SHA512

      6858e239d997fbcb9ca8a4585e44d895d914f970f27852a0eaef2f77ed3505510dcb61d9aa07a6c7e50636144b4efaba099523db00063b09491b13a8343432b7

    • SSDEEP

      12288:24NvWXvrIjkAp78k+or6GcLuSEYSIGoI:2IcvokHormLsQI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks