General

  • Target

    a5015ed7d25d74ca1d0f26a9b7e5eb86_JaffaCakes118

  • Size

    561KB

  • Sample

    241127-a3cwwaxqgv

  • MD5

    a5015ed7d25d74ca1d0f26a9b7e5eb86

  • SHA1

    4ef99ce5ad010841ded00b3bccba99fc0a6b0881

  • SHA256

    32eb922eb910e3baa92dee051fcf8b3d93d597a8f83aa471c3501a3283459e7f

  • SHA512

    38aab68854399263d46dc35f16cf5675fc77ee588649c3954b2705f0012db13a8c88ae97145950f57537f64958c9f85e28807bd5463637fbb0ba63be2eaaa349

  • SSDEEP

    12288:XVhSdiZ0jHDsGdZUnX/M/Jy/YT3Toqx6DGL:3Ww0jkXUJmi4qL

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

619c26986c79d067eda0bf8e57955aebe9af0fa7

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target

      a5015ed7d25d74ca1d0f26a9b7e5eb86_JaffaCakes118

    • Size

      561KB

    • MD5

      a5015ed7d25d74ca1d0f26a9b7e5eb86

    • SHA1

      4ef99ce5ad010841ded00b3bccba99fc0a6b0881

    • SHA256

      32eb922eb910e3baa92dee051fcf8b3d93d597a8f83aa471c3501a3283459e7f

    • SHA512

      38aab68854399263d46dc35f16cf5675fc77ee588649c3954b2705f0012db13a8c88ae97145950f57537f64958c9f85e28807bd5463637fbb0ba63be2eaaa349

    • SSDEEP

      12288:XVhSdiZ0jHDsGdZUnX/M/Jy/YT3Toqx6DGL:3Ww0jkXUJmi4qL

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks