General

  • Target

    e2bb5d90ec5e58704c02c5caf523a779_JaffaCakes118

  • Size

    512KB

  • Sample

    241211-xcfleaynaq

  • MD5

    e2bb5d90ec5e58704c02c5caf523a779

  • SHA1

    1b1f66c965e13fb688de94bef1c997bc7ab2a925

  • SHA256

    a3b16e12410430e756c84577347ddb750cef9de02a83b73562876f47866aaba1

  • SHA512

    85ec7342c82bae267890343df9a0b9ec05c320553953d998cfbad60f01b033619479a45b29d35f753185cacc0ec0a2831ab995612f1bf8679e11de483f33a4da

  • SSDEEP

    12288:v8EqGQBq6qxgn7GGLIntTJYUwVmJJSdxFi9C5OVjqM:kEqbBqD27GSU3zON3E9pjq

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

5f9dc4ba0bfbf6713c21b0fa5af7d17644daf751

Attributes
  • url4cnc

    https://t.me/ogaolittlebro2

rc4.plain
rc4.plain

Targets

    • Target

      e2bb5d90ec5e58704c02c5caf523a779_JaffaCakes118

    • Size

      512KB

    • MD5

      e2bb5d90ec5e58704c02c5caf523a779

    • SHA1

      1b1f66c965e13fb688de94bef1c997bc7ab2a925

    • SHA256

      a3b16e12410430e756c84577347ddb750cef9de02a83b73562876f47866aaba1

    • SHA512

      85ec7342c82bae267890343df9a0b9ec05c320553953d998cfbad60f01b033619479a45b29d35f753185cacc0ec0a2831ab995612f1bf8679e11de483f33a4da

    • SSDEEP

      12288:v8EqGQBq6qxgn7GGLIntTJYUwVmJJSdxFi9C5OVjqM:kEqbBqD27GSU3zON3E9pjq

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks