General

  • Target

    ab7bbb96c5f98bf3e72a51b0eab1d407_JaffaCakes118

  • Size

    570KB

  • Sample

    241128-h98acswmhn

  • MD5

    ab7bbb96c5f98bf3e72a51b0eab1d407

  • SHA1

    f88ccd6c37b55a3691fb9ba734fd7291ac23f50b

  • SHA256

    3bef0f6d01a792fc9ed1c780d977ed9940cbf68b29c1754b74eb596c83a44c05

  • SHA512

    d0aad1005b1d63bf984c132ce8194c1749f78de44dd397629af907cb549185a27d50b664a320678a79487fefa5fe8f36552ce3b0a90346d67256f5975d58f399

  • SSDEEP

    12288:Ez1Nq20aFkBV12AndnMYqzn3N6dQibpZOVtUhIzI:gnb0aSY3NEQEuDCIzI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

619c26986c79d067eda0bf8e57955aebe9af0fa7

Attributes
  • url4cnc

    https://telete.in/forkmaster123

rc4.plain
rc4.plain

Targets

    • Target

      ab7bbb96c5f98bf3e72a51b0eab1d407_JaffaCakes118

    • Size

      570KB

    • MD5

      ab7bbb96c5f98bf3e72a51b0eab1d407

    • SHA1

      f88ccd6c37b55a3691fb9ba734fd7291ac23f50b

    • SHA256

      3bef0f6d01a792fc9ed1c780d977ed9940cbf68b29c1754b74eb596c83a44c05

    • SHA512

      d0aad1005b1d63bf984c132ce8194c1749f78de44dd397629af907cb549185a27d50b664a320678a79487fefa5fe8f36552ce3b0a90346d67256f5975d58f399

    • SSDEEP

      12288:Ez1Nq20aFkBV12AndnMYqzn3N6dQibpZOVtUhIzI:gnb0aSY3NEQEuDCIzI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks