General

  • Target

    9a299513b57edc6d737e65718fd4cc5b_JaffaCakes118

  • Size

    498KB

  • Sample

    241125-jnydpswnfz

  • MD5

    9a299513b57edc6d737e65718fd4cc5b

  • SHA1

    3d23ce21e57fedc4100a284e49b23b21133b18c3

  • SHA256

    6777b50f0ffe70ba42742d60d38aeaa3ed09e3bff0be376cd32a2329d0272dd7

  • SHA512

    78b1dadc268d6d7fa6319ae5c93bb1b1c03cb89c8a3eee24798ec94ba53207aaad3eaefe2a4c176ae68eb6fae390bb6fca912dbd5e3cbf1d3ebe644868b28d3b

  • SSDEEP

    12288:HoRpnTjrrQ05K3/K4C48cEcRN+/icMDARwoO:HoRpnTchS4C48cEcRN+9MD2

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

1500579b152325f6339941b96a14b6d59c58ab13

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      9a299513b57edc6d737e65718fd4cc5b_JaffaCakes118

    • Size

      498KB

    • MD5

      9a299513b57edc6d737e65718fd4cc5b

    • SHA1

      3d23ce21e57fedc4100a284e49b23b21133b18c3

    • SHA256

      6777b50f0ffe70ba42742d60d38aeaa3ed09e3bff0be376cd32a2329d0272dd7

    • SHA512

      78b1dadc268d6d7fa6319ae5c93bb1b1c03cb89c8a3eee24798ec94ba53207aaad3eaefe2a4c176ae68eb6fae390bb6fca912dbd5e3cbf1d3ebe644868b28d3b

    • SSDEEP

      12288:HoRpnTjrrQ05K3/K4C48cEcRN+/icMDARwoO:HoRpnTchS4C48cEcRN+9MD2

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks