General

  • Target

    9fbb5f256ee3e9238d42185ed2b48ab4_JaffaCakes118

  • Size

    572KB

  • Sample

    241126-eqm9aszphl

  • MD5

    9fbb5f256ee3e9238d42185ed2b48ab4

  • SHA1

    42430d56d85764ede3aaba70bb5ca7f6722f443c

  • SHA256

    50b9bd3aea9355d60bb03f5d0cbcf3f601f1ec3d1b3c6e160bd0984d62baf15a

  • SHA512

    de92fd74712875d17148fb4d167c0fff1160c5abd4df331021005a5601f7815c7fff42cadb56e7852678e1c019ce993523940804dce9705d5a4b9c1c7b5b00a3

  • SSDEEP

    12288:oQqeXeSlK8QuVbDc79jhITJbcUEdjuXu0dN7792ty:TRuSlMrATJgUL/1

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      9fbb5f256ee3e9238d42185ed2b48ab4_JaffaCakes118

    • Size

      572KB

    • MD5

      9fbb5f256ee3e9238d42185ed2b48ab4

    • SHA1

      42430d56d85764ede3aaba70bb5ca7f6722f443c

    • SHA256

      50b9bd3aea9355d60bb03f5d0cbcf3f601f1ec3d1b3c6e160bd0984d62baf15a

    • SHA512

      de92fd74712875d17148fb4d167c0fff1160c5abd4df331021005a5601f7815c7fff42cadb56e7852678e1c019ce993523940804dce9705d5a4b9c1c7b5b00a3

    • SSDEEP

      12288:oQqeXeSlK8QuVbDc79jhITJbcUEdjuXu0dN7792ty:TRuSlMrATJgUL/1

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks