General

  • Target

    c3796f7d350eca4c6f26d9557699be59_JaffaCakes118

  • Size

    448KB

  • Sample

    241204-vcwlhsxjcm

  • MD5

    c3796f7d350eca4c6f26d9557699be59

  • SHA1

    87fb0c6f52fbc7a423b3d626918ad404199cd43e

  • SHA256

    45136f543d7a65603e860d5c6a2287086abe0e3a6333f8e405da044a95451ad5

  • SHA512

    a9be287f7974112e1e7934cd1d2bfdc16d868766f09f549b7c9bd01e5f58c7615f8c2284c46ac9895a16b215a1b286c1239e9d212f4d8635de89293d0b13311e

  • SSDEEP

    6144:6zLYWpm2kTitZK8zTRaYhvw683iUe6D55j9yRbnuajZ2a7aU4IPe0cg8cO/O2rRc:6z8Wp3f0bV3XD5mlucnaEP3i/OgRjPY

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      c3796f7d350eca4c6f26d9557699be59_JaffaCakes118

    • Size

      448KB

    • MD5

      c3796f7d350eca4c6f26d9557699be59

    • SHA1

      87fb0c6f52fbc7a423b3d626918ad404199cd43e

    • SHA256

      45136f543d7a65603e860d5c6a2287086abe0e3a6333f8e405da044a95451ad5

    • SHA512

      a9be287f7974112e1e7934cd1d2bfdc16d868766f09f549b7c9bd01e5f58c7615f8c2284c46ac9895a16b215a1b286c1239e9d212f4d8635de89293d0b13311e

    • SSDEEP

      6144:6zLYWpm2kTitZK8zTRaYhvw683iUe6D55j9yRbnuajZ2a7aU4IPe0cg8cO/O2rRc:6z8Wp3f0bV3XD5mlucnaEP3i/OgRjPY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks