General

  • Target

    afb7fda7a97396a9f0401ad26d696057_JaffaCakes118

  • Size

    504KB

  • Sample

    241129-h7mkwayjep

  • MD5

    afb7fda7a97396a9f0401ad26d696057

  • SHA1

    dc9381c64de3f0bbdcc97eda482624b1ba6c6241

  • SHA256

    5d7545aed39d6e4579ab79537c3c8c398dd60b537a22130464d1c1151befa73c

  • SHA512

    bc695db89323bcda9f50d2412a6827390b3d5740a269f146a8d1f12b40c9755bfe157364059fdbfbf13caa3c479cd70d4a74426165ca65d1134490cdb210851f

  • SSDEEP

    12288:rYU1k/SMK0I1aWTyjJJ/804z800OoSX93Chx0pII:rDk/g0wy9JBVPSNShFI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      afb7fda7a97396a9f0401ad26d696057_JaffaCakes118

    • Size

      504KB

    • MD5

      afb7fda7a97396a9f0401ad26d696057

    • SHA1

      dc9381c64de3f0bbdcc97eda482624b1ba6c6241

    • SHA256

      5d7545aed39d6e4579ab79537c3c8c398dd60b537a22130464d1c1151befa73c

    • SHA512

      bc695db89323bcda9f50d2412a6827390b3d5740a269f146a8d1f12b40c9755bfe157364059fdbfbf13caa3c479cd70d4a74426165ca65d1134490cdb210851f

    • SSDEEP

      12288:rYU1k/SMK0I1aWTyjJJ/804z800OoSX93Chx0pII:rDk/g0wy9JBVPSNShFI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks