General

  • Target

    659bcefdb9c6e948d20cc2582fa081ec_JaffaCakes118

  • Size

    477KB

  • Sample

    241021-fwwcjascjl

  • MD5

    659bcefdb9c6e948d20cc2582fa081ec

  • SHA1

    f70f4874c0ad8df7a43c8f302e6720eac05945ee

  • SHA256

    30dbf8a38ef44fcafeb10cf5339d7e124773d1c7f33e269f1100b6c4f93a134b

  • SHA512

    dc88174b37aa84ce994091a71a202f5b285bcfce9dac6b7a181aa1d5054d450dde98be8091dbddd11c55f4f85f06642ce5a329162986293ba784495110ce5c44

  • SSDEEP

    12288:qRxreHFciIAGefCogF5a1Qt6zlpEYmnGDUbR0CY:8+Fxmefdg7a1Q47EznGDUvY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      659bcefdb9c6e948d20cc2582fa081ec_JaffaCakes118

    • Size

      477KB

    • MD5

      659bcefdb9c6e948d20cc2582fa081ec

    • SHA1

      f70f4874c0ad8df7a43c8f302e6720eac05945ee

    • SHA256

      30dbf8a38ef44fcafeb10cf5339d7e124773d1c7f33e269f1100b6c4f93a134b

    • SHA512

      dc88174b37aa84ce994091a71a202f5b285bcfce9dac6b7a181aa1d5054d450dde98be8091dbddd11c55f4f85f06642ce5a329162986293ba784495110ce5c44

    • SSDEEP

      12288:qRxreHFciIAGefCogF5a1Qt6zlpEYmnGDUbR0CY:8+Fxmefdg7a1Q47EznGDUvY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks