General

  • Target

    c6d57f8f74f62e1b3f8732c9f1d78c9a_JaffaCakes118

  • Size

    496KB

  • Sample

    241205-kh1sbasnhq

  • MD5

    c6d57f8f74f62e1b3f8732c9f1d78c9a

  • SHA1

    10a52e9673863403f0446fea66d5206d646cc43e

  • SHA256

    fee6e072e3654446c3f79f36c8d8977ede6de679addb74e36da506a534767597

  • SHA512

    b35b4d9b0712d36f58fa604352940f57edde4d8329877f3a2f6bc7c16a74e212d7a16120deed014da3e913bed218a53c6f49238cdd089d3a8c78e8c2307d0996

  • SSDEEP

    12288:lFR5xMCFkfbD2/JtQ8AHgaNeh+HjbYO0pMRBuLY:lF0gJJAHgae+HjWE+Y

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

8a89272858125c31016bc130ad19557408b8bbe4

Attributes
  • url4cnc

    https://telete.in/jjbadb0y

rc4.plain
rc4.plain

Targets

    • Target

      c6d57f8f74f62e1b3f8732c9f1d78c9a_JaffaCakes118

    • Size

      496KB

    • MD5

      c6d57f8f74f62e1b3f8732c9f1d78c9a

    • SHA1

      10a52e9673863403f0446fea66d5206d646cc43e

    • SHA256

      fee6e072e3654446c3f79f36c8d8977ede6de679addb74e36da506a534767597

    • SHA512

      b35b4d9b0712d36f58fa604352940f57edde4d8329877f3a2f6bc7c16a74e212d7a16120deed014da3e913bed218a53c6f49238cdd089d3a8c78e8c2307d0996

    • SSDEEP

      12288:lFR5xMCFkfbD2/JtQ8AHgaNeh+HjbYO0pMRBuLY:lF0gJJAHgae+HjWE+Y

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks