Overview

overview

10

Static

static

3

9db2159a7d...18.exe

windows7-x64

10

9db2159a7d...18.exe

windows10-2004-x64

10

Resubmissions

26-11-2024 01:40

241126-b3s4jaxlfw 10

25-11-2024 20:22

241125-y5wnrs1mck 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9db2159a7d540f48fbf46d27500811ae_JaffaCakes118

  • Size

    546KB

  • Sample

    241125-y5wnrs1mck

  • MD5

    9db2159a7d540f48fbf46d27500811ae

  • SHA1

    5e851f00a8c630ffd2d51d405db1fc50267dc5bf

  • SHA256

    afd91482057baaeb803ad6496ca1616900f37eff30a4fccbd5a1a50632c4a1e6

  • SHA512

    25f511006b573ac36043a79c7266f32c57608c83fd81e85c84f040f46d1ca13b6f7694e907bd2d83f2c4b0a35c71cc8f91f28aa2e70d078bb502d88b54f7f41a

  • SSDEEP

    12288:Y9yhF9jXnidMiLuFKWl1dI7hVFL6Lzxd6L:M+aMiiUWAYL6L

Score
10/10
raccoon8cec4b984fbf98ab1f444f5e9a6d03ff51011556discoverystealer

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

8cec4b984fbf98ab1f444f5e9a6d03ff51011556

Attributes
  • url4cnc

    http://teletop.top/jjbadb0y

    http://teleta.top/jjbadb0y

    https://t.me/jjbadb0y

rc4.plain
rc4.plain

Targets

    • Target

      9db2159a7d540f48fbf46d27500811ae_JaffaCakes118

    • Size

      546KB

    • MD5

      9db2159a7d540f48fbf46d27500811ae

    • SHA1

      5e851f00a8c630ffd2d51d405db1fc50267dc5bf

    • SHA256

      afd91482057baaeb803ad6496ca1616900f37eff30a4fccbd5a1a50632c4a1e6

    • SHA512

      25f511006b573ac36043a79c7266f32c57608c83fd81e85c84f040f46d1ca13b6f7694e907bd2d83f2c4b0a35c71cc8f91f28aa2e70d078bb502d88b54f7f41a

    • SSDEEP

      12288:Y9yhF9jXnidMiLuFKWl1dI7hVFL6Lzxd6L:M+aMiiUWAYL6L

    Score
    10/10
    raccoon8cec4b984fbf98ab1f444f5e9a6d03ff51011556discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks