General

  • Target

    b0eda06015f710f6810a428245ff6374_JaffaCakes118

  • Size

    556KB

  • Sample

    241129-nkzvksspgx

  • MD5

    b0eda06015f710f6810a428245ff6374

  • SHA1

    80fe2b21c2cf756bd162b2112d0f956c53cfe6da

  • SHA256

    5978984d7f8a80cba8b94b3e4e973eeb6218f82535ea8e55aca5deb8830afc2c

  • SHA512

    f4d59bfbd2e55151c8a39845fb8c3f9ed11b4d66c4f785e1ba2e08926d3096c9a21e9b97e85d5272cfca43f8696a863c9d9ee696cef7a231ea6582ba864e4ec2

  • SSDEEP

    12288:pYAGG/rYJXhilcyeMTy5pUnOPCxi8RGiyO/DZmYd8eD2A+kIz:pj/rY0fOPCUTih/4neKYIz

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      b0eda06015f710f6810a428245ff6374_JaffaCakes118

    • Size

      556KB

    • MD5

      b0eda06015f710f6810a428245ff6374

    • SHA1

      80fe2b21c2cf756bd162b2112d0f956c53cfe6da

    • SHA256

      5978984d7f8a80cba8b94b3e4e973eeb6218f82535ea8e55aca5deb8830afc2c

    • SHA512

      f4d59bfbd2e55151c8a39845fb8c3f9ed11b4d66c4f785e1ba2e08926d3096c9a21e9b97e85d5272cfca43f8696a863c9d9ee696cef7a231ea6582ba864e4ec2

    • SSDEEP

      12288:pYAGG/rYJXhilcyeMTy5pUnOPCxi8RGiyO/DZmYd8eD2A+kIz:pj/rY0fOPCUTih/4neKYIz

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks