General

  • Target

    ed20a01ec2d93943bd0664fafb76daa6_JaffaCakes118

  • Size

    462KB

  • Sample

    241213-21re2a1jgt

  • MD5

    ed20a01ec2d93943bd0664fafb76daa6

  • SHA1

    4736f0170c32b4757e062eb6b1d47d46c7d5ab29

  • SHA256

    5bc02ebc009910c9625991d64f2170d0c1ddd2b403d34674e3b48e8fd0f22242

  • SHA512

    b22360f22bb48529b2b986f7ef37eb9d1cdb42eaaea7fa44b93fc48a0f2b02ee4d4029d1d0e80867ce0a8d8a322f9c463182910c83cc36d4b53fb2c50c470ccf

  • SSDEEP

    12288:+kRfdSeBVKuvlfIGLUzA9iP+ngOu4sl4OxCDi:PfnKu9fIGYzA4PyXOAi

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

cd8dc1031358b1aec55cc6bc447df1018b068607

Attributes
  • url4cnc

    https://telete.in/jagressor_kz

rc4.plain
rc4.plain

Targets

    • Target

      ed20a01ec2d93943bd0664fafb76daa6_JaffaCakes118

    • Size

      462KB

    • MD5

      ed20a01ec2d93943bd0664fafb76daa6

    • SHA1

      4736f0170c32b4757e062eb6b1d47d46c7d5ab29

    • SHA256

      5bc02ebc009910c9625991d64f2170d0c1ddd2b403d34674e3b48e8fd0f22242

    • SHA512

      b22360f22bb48529b2b986f7ef37eb9d1cdb42eaaea7fa44b93fc48a0f2b02ee4d4029d1d0e80867ce0a8d8a322f9c463182910c83cc36d4b53fb2c50c470ccf

    • SSDEEP

      12288:+kRfdSeBVKuvlfIGLUzA9iP+ngOu4sl4OxCDi:PfnKu9fIGYzA4PyXOAi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks