General

  • Target

    d3b9235c25f42947b78719590c688201_JaffaCakes118

  • Size

    466KB

  • Sample

    241207-1ghs4svmfy

  • MD5

    d3b9235c25f42947b78719590c688201

  • SHA1

    b35fc97d14d5f5f41418b6a5bcf9a4c88a45f8f2

  • SHA256

    a4f16c8974fe2e604f71fa76c1266ed9e943c28c6a680892339cb497dbf5c521

  • SHA512

    49a0e51c3e76e627e5713c66ebeacec6a7466dc04a6c9280423d8f388cda93762bcbbf7df6a3d9c18dbf13420dd0dceaf26b3800b368cebda7a62af945118b75

  • SSDEEP

    12288:Z1Rp5PfcYmmKWVY4Rh4OMwnaGw+nd7uyVO9vi:Vp5PfcR0RBlaGFnzQvi

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

022f7f19749a47aa4d6a10b25bfd352ecb963373

Attributes
  • url4cnc

    https://telete.in/h_ghaibin2_1

rc4.plain
rc4.plain

Targets

    • Target

      d3b9235c25f42947b78719590c688201_JaffaCakes118

    • Size

      466KB

    • MD5

      d3b9235c25f42947b78719590c688201

    • SHA1

      b35fc97d14d5f5f41418b6a5bcf9a4c88a45f8f2

    • SHA256

      a4f16c8974fe2e604f71fa76c1266ed9e943c28c6a680892339cb497dbf5c521

    • SHA512

      49a0e51c3e76e627e5713c66ebeacec6a7466dc04a6c9280423d8f388cda93762bcbbf7df6a3d9c18dbf13420dd0dceaf26b3800b368cebda7a62af945118b75

    • SSDEEP

      12288:Z1Rp5PfcYmmKWVY4Rh4OMwnaGw+nd7uyVO9vi:Vp5PfcR0RBlaGFnzQvi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks