General

  • Target

    f794482e6fcdac22d8a86e4cfe1c5fd1_JaffaCakes118

  • Size

    503KB

  • Sample

    241216-gfc2pawrc1

  • MD5

    f794482e6fcdac22d8a86e4cfe1c5fd1

  • SHA1

    709a945870e7dc02eb35d27907f277cb8ff46b55

  • SHA256

    67e20fb330a04ed5016a2386014c472ddcdd7fff3d6d739ebe175e7f88861549

  • SHA512

    bae999b582683457e192f9f1bd607a4e8ebe61c0c97d8c3b2454506c6566047f7cea80d5b82e19b4a8f7ebe2fe3ee6fc536ae75aeb4e3c9e30b27f313a028046

  • SSDEEP

    12288:I1dGAWfGXtAwbu8bfv0SiQ/DF/BYdRvipT0/I:I+kXvuyf8475BOKV0/I

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      f794482e6fcdac22d8a86e4cfe1c5fd1_JaffaCakes118

    • Size

      503KB

    • MD5

      f794482e6fcdac22d8a86e4cfe1c5fd1

    • SHA1

      709a945870e7dc02eb35d27907f277cb8ff46b55

    • SHA256

      67e20fb330a04ed5016a2386014c472ddcdd7fff3d6d739ebe175e7f88861549

    • SHA512

      bae999b582683457e192f9f1bd607a4e8ebe61c0c97d8c3b2454506c6566047f7cea80d5b82e19b4a8f7ebe2fe3ee6fc536ae75aeb4e3c9e30b27f313a028046

    • SSDEEP

      12288:I1dGAWfGXtAwbu8bfv0SiQ/DF/BYdRvipT0/I:I+kXvuyf8475BOKV0/I

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks