General

  • Target

    896dc90daa1d083a40e1e37fdb4d15fa_JaffaCakes118

  • Size

    503KB

  • Sample

    241103-d27lmstjbz

  • MD5

    896dc90daa1d083a40e1e37fdb4d15fa

  • SHA1

    6a14af6c00e62696484ad3d47735e36c3093786a

  • SHA256

    6ef0190cda06f62044e6aed620b74d3b1c588bdafd3c491ae729b0ef25dc00a5

  • SHA512

    a252731767347989d3b9518297aa5d2484580283275af088bae2e3ac4a247306ea2dab155145bfef019c809f2f22e786499a29723378a7ca9f485942d117ca7f

  • SSDEEP

    12288:L75MlbnGJYAPAmbscrdZTSBd/E9xflkkPnI:L7oRsdEBd/+nI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      896dc90daa1d083a40e1e37fdb4d15fa_JaffaCakes118

    • Size

      503KB

    • MD5

      896dc90daa1d083a40e1e37fdb4d15fa

    • SHA1

      6a14af6c00e62696484ad3d47735e36c3093786a

    • SHA256

      6ef0190cda06f62044e6aed620b74d3b1c588bdafd3c491ae729b0ef25dc00a5

    • SHA512

      a252731767347989d3b9518297aa5d2484580283275af088bae2e3ac4a247306ea2dab155145bfef019c809f2f22e786499a29723378a7ca9f485942d117ca7f

    • SSDEEP

      12288:L75MlbnGJYAPAmbscrdZTSBd/E9xflkkPnI:L7oRsdEBd/+nI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks