General

  • Target

    bdb8002a5c5d8880ba2133d765d44193_JaffaCakes118

  • Size

    603KB

  • Sample

    241203-rcc8dsykg1

  • MD5

    bdb8002a5c5d8880ba2133d765d44193

  • SHA1

    bc8f1ad4fb372d8ae17be2f20cfa9fad3a2679f8

  • SHA256

    254c28cd968abd1048e5baa80c9aff405e32de2d840d5b0e5882515ad6d47be2

  • SHA512

    6b2ae36779a6a721c8b39928f16857677c81c40a4b6dc69f74aa5ac5feb2c70595dd76810dc10a2c2302561b2702e1b753a07b6bd4dc499721a225afabebc8a4

  • SSDEEP

    12288:sMyXcpXC3XphQAFoveV21dpA/zIE7L65qF/0uCz/sHqHfhLi0q:AMpXGtfadpW1W5OZ4o8E

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

fa93985ba268e1dd8b72ef392332edcba95ddd45

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      bdb8002a5c5d8880ba2133d765d44193_JaffaCakes118

    • Size

      603KB

    • MD5

      bdb8002a5c5d8880ba2133d765d44193

    • SHA1

      bc8f1ad4fb372d8ae17be2f20cfa9fad3a2679f8

    • SHA256

      254c28cd968abd1048e5baa80c9aff405e32de2d840d5b0e5882515ad6d47be2

    • SHA512

      6b2ae36779a6a721c8b39928f16857677c81c40a4b6dc69f74aa5ac5feb2c70595dd76810dc10a2c2302561b2702e1b753a07b6bd4dc499721a225afabebc8a4

    • SSDEEP

      12288:sMyXcpXC3XphQAFoveV21dpA/zIE7L65qF/0uCz/sHqHfhLi0q:AMpXGtfadpW1W5OZ4o8E

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks