General

  • Target

    f814953dd1903ce502be57b6bed587c0_JaffaCakes118

  • Size

    543KB

  • Sample

    241216-jzxxbaspcq

  • MD5

    f814953dd1903ce502be57b6bed587c0

  • SHA1

    a14364424796ac53fc3ff9c07c484910b8c8a068

  • SHA256

    a7a350da4a5263ee182de850ccd69662e6162b8e3fa42ed089a89be10cecbc05

  • SHA512

    954f3213bee3606399d5be9c54dce699bbda135544da9d0c6eb88ff42fb9069eb791712b7ffe8370288e675119a3353227b3458387f99120ee2a9b15e791dba6

  • SSDEEP

    12288:gstMt1/5e+puY12F9aEsxcT07mRlLV708I7xNk2R/:rC/k+J2F3X7Rn708qk2R/

Malware Config

Extracted

Family

raccoon

Version

1.7.2

Botnet

5795f664a709e882ab1ab1029a85e1649f221474

Attributes
  • url4cnc

    https://telete.in/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      f814953dd1903ce502be57b6bed587c0_JaffaCakes118

    • Size

      543KB

    • MD5

      f814953dd1903ce502be57b6bed587c0

    • SHA1

      a14364424796ac53fc3ff9c07c484910b8c8a068

    • SHA256

      a7a350da4a5263ee182de850ccd69662e6162b8e3fa42ed089a89be10cecbc05

    • SHA512

      954f3213bee3606399d5be9c54dce699bbda135544da9d0c6eb88ff42fb9069eb791712b7ffe8370288e675119a3353227b3458387f99120ee2a9b15e791dba6

    • SSDEEP

      12288:gstMt1/5e+puY12F9aEsxcT07mRlLV708I7xNk2R/:rC/k+J2F3X7Rn708qk2R/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks