General

  • Target

    cb3536589b0f939cc1a4d5b14d6747eb_JaffaCakes118

  • Size

    468KB

  • Sample

    241206-ftlejsxpal

  • MD5

    cb3536589b0f939cc1a4d5b14d6747eb

  • SHA1

    baae44b86c6c16f9f70eb84ccba209f254b5c752

  • SHA256

    39804d887b31f48334e49bb8c285556c06bca9c9a9dfaec5d9f8fee609648bc6

  • SHA512

    6794422d7bba412aba230bfbddbadd8b042071b507737fdc90958923c8aa833111252877901c046dcbc3034ec6c00a7ff64e44ce9a7964267a99f45e73a884ca

  • SSDEEP

    12288:aW8y4oW/dZJB9DjgH6czTPuWuWyfu0VjcWTH5ONVi:J4owxRgaURjsBjcbi

Malware Config

Extracted

Family

raccoon

Botnet

93d3ccba4a3cbd5e268873fc1760b2335272e198

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      cb3536589b0f939cc1a4d5b14d6747eb_JaffaCakes118

    • Size

      468KB

    • MD5

      cb3536589b0f939cc1a4d5b14d6747eb

    • SHA1

      baae44b86c6c16f9f70eb84ccba209f254b5c752

    • SHA256

      39804d887b31f48334e49bb8c285556c06bca9c9a9dfaec5d9f8fee609648bc6

    • SHA512

      6794422d7bba412aba230bfbddbadd8b042071b507737fdc90958923c8aa833111252877901c046dcbc3034ec6c00a7ff64e44ce9a7964267a99f45e73a884ca

    • SSDEEP

      12288:aW8y4oW/dZJB9DjgH6czTPuWuWyfu0VjcWTH5ONVi:J4owxRgaURjsBjcbi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks