General

  • Target

    96ecf8df9d573bc6343a69980370eba6_JaffaCakes118

  • Size

    492KB

  • Sample

    241124-ytntsaxjgw

  • MD5

    96ecf8df9d573bc6343a69980370eba6

  • SHA1

    272f96604c54a5fb8cedce9307c336f3bd78c0bf

  • SHA256

    c140a0d5300a6ac4594966cd7da358e79c06fb89a87a713f406386eb4be211e5

  • SHA512

    9fb1d08c4877678215aa2521504f2af6011c0208615d53750369162075875bfdeeab9ac6ff1c580489d5fe3ccd8726411f627ed7b0d6e12d7296f4c86a54a14f

  • SSDEEP

    6144:qTjMWncrLPVzh9D7IGKY/mFR4xsE6X1h1ECBq1mxrCOrfb7knGyHM:qHMWnc3PFwRXX1cCM1oWMTI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      96ecf8df9d573bc6343a69980370eba6_JaffaCakes118

    • Size

      492KB

    • MD5

      96ecf8df9d573bc6343a69980370eba6

    • SHA1

      272f96604c54a5fb8cedce9307c336f3bd78c0bf

    • SHA256

      c140a0d5300a6ac4594966cd7da358e79c06fb89a87a713f406386eb4be211e5

    • SHA512

      9fb1d08c4877678215aa2521504f2af6011c0208615d53750369162075875bfdeeab9ac6ff1c580489d5fe3ccd8726411f627ed7b0d6e12d7296f4c86a54a14f

    • SSDEEP

      6144:qTjMWncrLPVzh9D7IGKY/mFR4xsE6X1h1ECBq1mxrCOrfb7knGyHM:qHMWnc3PFwRXX1cCM1oWMTI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks