General

  • Target

    e0586f6816a18e456e98833314529926_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241211-hrlzeawqfk

  • MD5

    e0586f6816a18e456e98833314529926

  • SHA1

    03e8d178b86b7e0778b8593516a581e3cd673b24

  • SHA256

    7b541f09ade72f92973f6397ce9b52f2765855e9aa55cc1611b6f9da8cef6600

  • SHA512

    011a9ef9ad2cf3ac98ef0be2f02f40986da1d32212c6737fa0a2c310540715ac7c3a8a94ba2f15621e84f36bed52216b7d91d512383b674df29e7df0ab19aa01

  • SSDEEP

    24576:mqj2U66Fn8aX+zT2w13Oob38SQtUR4iBo640JTuNWDJS0u:k2hGPLVQiR4iBR5yoJS

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

63d550b5c5185e252a650ddb9bc95800dac04ff1

Attributes
  • url4cnc

    https://telete.in/h_manchik_1

rc4.plain
rc4.plain

Targets

    • Target

      e0586f6816a18e456e98833314529926_JaffaCakes118

    • Size

      1.2MB

    • MD5

      e0586f6816a18e456e98833314529926

    • SHA1

      03e8d178b86b7e0778b8593516a581e3cd673b24

    • SHA256

      7b541f09ade72f92973f6397ce9b52f2765855e9aa55cc1611b6f9da8cef6600

    • SHA512

      011a9ef9ad2cf3ac98ef0be2f02f40986da1d32212c6737fa0a2c310540715ac7c3a8a94ba2f15621e84f36bed52216b7d91d512383b674df29e7df0ab19aa01

    • SSDEEP

      24576:mqj2U66Fn8aX+zT2w13Oob38SQtUR4iBo640JTuNWDJS0u:k2hGPLVQiR4iBR5yoJS

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks