General

  • Target

    a40fcb254f697c7b9a287ebeb324d99c_JaffaCakes118

  • Size

    556KB

  • Sample

    241126-zpa8kawjcj

  • MD5

    a40fcb254f697c7b9a287ebeb324d99c

  • SHA1

    c988e9628faea1fe66de88374bab5017258934bd

  • SHA256

    f2d87a0f7c8a4b36703946b849c0468e06005ddd3fcf2a6f8665e5c6447733c1

  • SHA512

    323ac8a73ac384573cf7516b0e0e94430bc4a4138fc19413e34986ba1cf0fbefd434869adfff024d795b9b779f90a2174e02a15367ca298423d15d8a17c55b23

  • SSDEEP

    12288:RgxvsOL6QYXAOrjxsXzszzVLGD66QsvpALt7b0KImRLevDpI:RgTL6QlXzsz5quAvQnBRMdI

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      a40fcb254f697c7b9a287ebeb324d99c_JaffaCakes118

    • Size

      556KB

    • MD5

      a40fcb254f697c7b9a287ebeb324d99c

    • SHA1

      c988e9628faea1fe66de88374bab5017258934bd

    • SHA256

      f2d87a0f7c8a4b36703946b849c0468e06005ddd3fcf2a6f8665e5c6447733c1

    • SHA512

      323ac8a73ac384573cf7516b0e0e94430bc4a4138fc19413e34986ba1cf0fbefd434869adfff024d795b9b779f90a2174e02a15367ca298423d15d8a17c55b23

    • SSDEEP

      12288:RgxvsOL6QYXAOrjxsXzszzVLGD66QsvpALt7b0KImRLevDpI:RgTL6QlXzsz5quAvQnBRMdI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks