General

  • Target

    6cb236cc209892626e21acf97db96baa_JaffaCakes118

  • Size

    593KB

  • Sample

    241023-b5fwzsverc

  • MD5

    6cb236cc209892626e21acf97db96baa

  • SHA1

    c2d9be3d84d8eba7fb12ac0e95c4a941799511e0

  • SHA256

    28f5cef5a2b08b32e95aaf863e096c87dfbba6160d829db379936672fac62def

  • SHA512

    6f5acd4bfdb29ffe944c949a9e586ffa4b09b4c9d69a6147bc247c2bd25820f3075722521115c0b91fcb8ef69f22eec08be5a1388b6b80ddd8030996efad34ed

  • SSDEEP

    12288:sLlFq+kfq4zlRAW/6CHtIg9kChUuDhwlg55oLgiIoQD5:sJF8JJRJ6CakkMGlGodI5

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

04105b38734ffe97e1fcb0d1e56a240a44bda5ce

Attributes
  • url4cnc

    https://tttttt.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      6cb236cc209892626e21acf97db96baa_JaffaCakes118

    • Size

      593KB

    • MD5

      6cb236cc209892626e21acf97db96baa

    • SHA1

      c2d9be3d84d8eba7fb12ac0e95c4a941799511e0

    • SHA256

      28f5cef5a2b08b32e95aaf863e096c87dfbba6160d829db379936672fac62def

    • SHA512

      6f5acd4bfdb29ffe944c949a9e586ffa4b09b4c9d69a6147bc247c2bd25820f3075722521115c0b91fcb8ef69f22eec08be5a1388b6b80ddd8030996efad34ed

    • SSDEEP

      12288:sLlFq+kfq4zlRAW/6CHtIg9kChUuDhwlg55oLgiIoQD5:sJF8JJRJ6CakkMGlGodI5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks