General

  • Target

    28eefc36104bebb595fb38cae21a7d0a_JaffaCakes118

  • Size

    547KB

  • Sample

    240706-vksvlawcmq

  • MD5

    28eefc36104bebb595fb38cae21a7d0a

  • SHA1

    2badb31294cb13ebffd3492ac364029f39be378b

  • SHA256

    09af49f80d3185ecc400db099f6a56cdae9c3a55a51f573d179c52be5e8b49cb

  • SHA512

    07fa051ad6321a735af7815afd2c44860e231e08919230109d9746d13ab600d85236a85897bd117efcbbae70646e0a26a9835126719077f2344e6e45731f1370

  • SSDEEP

    12288:1XApZS9liDodNK3zWKzW5P1YtzTrxKHzJYJzxp6L:1YZSHCwNmz3sYtYYl36L

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      28eefc36104bebb595fb38cae21a7d0a_JaffaCakes118

    • Size

      547KB

    • MD5

      28eefc36104bebb595fb38cae21a7d0a

    • SHA1

      2badb31294cb13ebffd3492ac364029f39be378b

    • SHA256

      09af49f80d3185ecc400db099f6a56cdae9c3a55a51f573d179c52be5e8b49cb

    • SHA512

      07fa051ad6321a735af7815afd2c44860e231e08919230109d9746d13ab600d85236a85897bd117efcbbae70646e0a26a9835126719077f2344e6e45731f1370

    • SSDEEP

      12288:1XApZS9liDodNK3zWKzW5P1YtzTrxKHzJYJzxp6L:1YZSHCwNmz3sYtYYl36L

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Matrix

Tasks