General

  • Target

    a20e837c00b73d104f168c5e3556ed69_JaffaCakes118

  • Size

    506KB

  • Sample

    241126-p6r8asykfl

  • MD5

    a20e837c00b73d104f168c5e3556ed69

  • SHA1

    f4d17997fded9c8fad153a67f02b0d768849bf1f

  • SHA256

    e1188d327931485523c83b1e16af6096af97f2753bfbc1a7065e42eb58a2b110

  • SHA512

    d5608c04297109df9abcfe8ad4f8b5b65f9a5349a6390b39a347378febdfbd97e644bc830fd9fe0944d2f4d2597e1d4251bf0b06a2b410c4ba21224328c0e0f3

  • SSDEEP

    6144:Hzbpw6dkcsjPtNxTvYcCRpykL8evCB4LffEQb9srZIC7SOPV+bW4vCIwY8:HzijVHYxL8WCWjPGrOCXV8DC5

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

ad90a7d46dd9833fb5a0293f0bb4aac37f7c0140

Attributes
  • url4cnc

    https://telete.in/open3entershift

rc4.plain
rc4.plain

Targets

    • Target

      a20e837c00b73d104f168c5e3556ed69_JaffaCakes118

    • Size

      506KB

    • MD5

      a20e837c00b73d104f168c5e3556ed69

    • SHA1

      f4d17997fded9c8fad153a67f02b0d768849bf1f

    • SHA256

      e1188d327931485523c83b1e16af6096af97f2753bfbc1a7065e42eb58a2b110

    • SHA512

      d5608c04297109df9abcfe8ad4f8b5b65f9a5349a6390b39a347378febdfbd97e644bc830fd9fe0944d2f4d2597e1d4251bf0b06a2b410c4ba21224328c0e0f3

    • SSDEEP

      6144:Hzbpw6dkcsjPtNxTvYcCRpykL8evCB4LffEQb9srZIC7SOPV+bW4vCIwY8:HzijVHYxL8WCWjPGrOCXV8DC5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks