General

  • Target

    ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

  • Size

    477KB

  • Sample

    241128-ya98nsxpg1

  • MD5

    ad5db0b3ec54bebc211561a28f2565e8

  • SHA1

    4ae9a2b754fabd1dc4a8baee8d76c884b349b8b9

  • SHA256

    7d9460b084a92d0c840465c39861f3f028d7d1880f9b5a34d52976f9dd820db7

  • SHA512

    03280433899316eb72a6f9ccc518f597ddc7acf294b3408acdcbc796f505eb3710178a8df9f7b3188c3531dfdba516a0af1466abc812ef72124de2e8f4eeff44

  • SSDEEP

    12288:yNQpZYwAgRJyOSUBPlr7n6i9rhIqQgmZP2R+AMp+GPEFgUeYpRKY:WvgcQrdiXgm0+1p+GPELsY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

    • Size

      477KB

    • MD5

      ad5db0b3ec54bebc211561a28f2565e8

    • SHA1

      4ae9a2b754fabd1dc4a8baee8d76c884b349b8b9

    • SHA256

      7d9460b084a92d0c840465c39861f3f028d7d1880f9b5a34d52976f9dd820db7

    • SHA512

      03280433899316eb72a6f9ccc518f597ddc7acf294b3408acdcbc796f505eb3710178a8df9f7b3188c3531dfdba516a0af1466abc812ef72124de2e8f4eeff44

    • SSDEEP

      12288:yNQpZYwAgRJyOSUBPlr7n6i9rhIqQgmZP2R+AMp+GPEFgUeYpRKY:WvgcQrdiXgm0+1p+GPELsY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks