General

  • Target

    8975464d493a1669c83ad02d91f6fe64_JaffaCakes118

  • Size

    556KB

  • Sample

    241103-d7vh9sxjaj

  • MD5

    8975464d493a1669c83ad02d91f6fe64

  • SHA1

    95c6bfc9ad4b22b50481990996ff02fdf9cc96fa

  • SHA256

    2884983044037369de29a626a68e63b23010e7840bc2af82f9f85510c283b597

  • SHA512

    70e4d32fe728dc93cfa569e19dc5e5403a84c60aaba5f5d2cf139c90c9057e8b15e2dd7302bd32e407f7bf33eccad2ab834953b30603b55a4a3afea98c6bbe04

  • SSDEEP

    12288:4RKZ84DAeXZwrASFo89C84pvsCIPAY0voZA3J2:4B4DA08t4pvs5ApQZA3J2

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      8975464d493a1669c83ad02d91f6fe64_JaffaCakes118

    • Size

      556KB

    • MD5

      8975464d493a1669c83ad02d91f6fe64

    • SHA1

      95c6bfc9ad4b22b50481990996ff02fdf9cc96fa

    • SHA256

      2884983044037369de29a626a68e63b23010e7840bc2af82f9f85510c283b597

    • SHA512

      70e4d32fe728dc93cfa569e19dc5e5403a84c60aaba5f5d2cf139c90c9057e8b15e2dd7302bd32e407f7bf33eccad2ab834953b30603b55a4a3afea98c6bbe04

    • SSDEEP

      12288:4RKZ84DAeXZwrASFo89C84pvsCIPAY0voZA3J2:4B4DA08t4pvs5ApQZA3J2

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks