General

  • Target

    7dc4e0f539a25927ca357ec9a6fbe234_JaffaCakes118

  • Size

    572KB

  • Sample

    241030-d95r1sxlam

  • MD5

    7dc4e0f539a25927ca357ec9a6fbe234

  • SHA1

    560f07b69e43725e2948a675cdb6d65787f3c0bb

  • SHA256

    668719a6a2652e9493ad13241ddbc7beb4191dd675c1f471aeaf220f783decfa

  • SHA512

    d8c90082a514eecb5c78b29647517ee7dfecfbb249a3c1fd98b206fb475e0563ea10fbeb6579771bc8628ea618017f3c68238d8725ebfee3f47b5db5bcb94dd7

  • SSDEEP

    12288:Yimljb5ZKi4bBeZDDug2AlBUfI3Dv/2yLETzjW5Tg:YimlPP/4bUFleWvuyLOjWxg

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

87188f9569ec8981b502a8696353357862c7a96d

Attributes
  • url4cnc

    https://telete.in/fsdhelloagain

rc4.plain
rc4.plain

Targets

    • Target

      7dc4e0f539a25927ca357ec9a6fbe234_JaffaCakes118

    • Size

      572KB

    • MD5

      7dc4e0f539a25927ca357ec9a6fbe234

    • SHA1

      560f07b69e43725e2948a675cdb6d65787f3c0bb

    • SHA256

      668719a6a2652e9493ad13241ddbc7beb4191dd675c1f471aeaf220f783decfa

    • SHA512

      d8c90082a514eecb5c78b29647517ee7dfecfbb249a3c1fd98b206fb475e0563ea10fbeb6579771bc8628ea618017f3c68238d8725ebfee3f47b5db5bcb94dd7

    • SSDEEP

      12288:Yimljb5ZKi4bBeZDDug2AlBUfI3Dv/2yLETzjW5Tg:YimlPP/4bUFleWvuyLOjWxg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks