General

  • Target

    c95c7d761ed4b8c4a2926979a9367e37_JaffaCakes118

  • Size

    556KB

  • Sample

    241205-zpq9saxqhp

  • MD5

    c95c7d761ed4b8c4a2926979a9367e37

  • SHA1

    ebd76d3917fd67ad49026725df8b095b11f22425

  • SHA256

    14e4824be0683d1089694045fb18bfef2da645ab2c4c8b07158894e9d9ec2a1b

  • SHA512

    79af7752a69e0cdfafb6aaddbc2b6148c7821c795fd76ac1673daf695c3abc96e5b31b579ff9eb4403d59ccd0668bbcb75c348940390153b0a127681e21781a9

  • SSDEEP

    12288:0zbAx7iR1RcKtFcy1RwRCjz4QrZkWzcHQMIXGDC6Pj5M:0ziiR1SC34BWAwMJGM1M

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      c95c7d761ed4b8c4a2926979a9367e37_JaffaCakes118

    • Size

      556KB

    • MD5

      c95c7d761ed4b8c4a2926979a9367e37

    • SHA1

      ebd76d3917fd67ad49026725df8b095b11f22425

    • SHA256

      14e4824be0683d1089694045fb18bfef2da645ab2c4c8b07158894e9d9ec2a1b

    • SHA512

      79af7752a69e0cdfafb6aaddbc2b6148c7821c795fd76ac1673daf695c3abc96e5b31b579ff9eb4403d59ccd0668bbcb75c348940390153b0a127681e21781a9

    • SSDEEP

      12288:0zbAx7iR1RcKtFcy1RwRCjz4QrZkWzcHQMIXGDC6Pj5M:0ziiR1SC34BWAwMJGM1M

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks