General

  • Target

    cc350161b58a017e09a9a50288ae3fc5_JaffaCakes118

  • Size

    511KB

  • Sample

    241206-k73m7swmak

  • MD5

    cc350161b58a017e09a9a50288ae3fc5

  • SHA1

    41977b9f63d1f1bc555cc4a56b6d9e3d60543e1c

  • SHA256

    41f3daea057e507439d38c4ce3c090576f34cdf9bc14c1d765894557083cafdb

  • SHA512

    b5362073c930e81ba8451346594ad9282a6dba56b50621d2c560a982584d79f3c633ef4077167bb7cf074c176c287f43815abec5ce5948921528c0ff20eab0e1

  • SSDEEP

    6144:bUoWsiCdYnwBD/uY/wYWdQn3oxcYIYCnyzLtJ2VKMxt3eOP/PYqorjWWCIwv3D:4HsiCZLDu1CnyzpwVht3eOXwqon9C5v

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      cc350161b58a017e09a9a50288ae3fc5_JaffaCakes118

    • Size

      511KB

    • MD5

      cc350161b58a017e09a9a50288ae3fc5

    • SHA1

      41977b9f63d1f1bc555cc4a56b6d9e3d60543e1c

    • SHA256

      41f3daea057e507439d38c4ce3c090576f34cdf9bc14c1d765894557083cafdb

    • SHA512

      b5362073c930e81ba8451346594ad9282a6dba56b50621d2c560a982584d79f3c633ef4077167bb7cf074c176c287f43815abec5ce5948921528c0ff20eab0e1

    • SSDEEP

      6144:bUoWsiCdYnwBD/uY/wYWdQn3oxcYIYCnyzLtJ2VKMxt3eOP/PYqorjWWCIwv3D:4HsiCZLDu1CnyzpwVht3eOXwqon9C5v

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks