General

  • Target

    a57b534715ba56f5f9f9f27b0d57ad34_JaffaCakes118

  • Size

    544KB

  • Sample

    240818-fm2syswhph

  • MD5

    a57b534715ba56f5f9f9f27b0d57ad34

  • SHA1

    0fc07bf4defc689bace1dd256fc096174a916878

  • SHA256

    6ca5031ab0efac1fdc6d3b251072ea93e70d911067995cd367778bfffd2b45a9

  • SHA512

    caf828246b0364607638975914697785b3793f92afdf4c3685b3c1aec85e10e348fd51c237884344c9f033d39508b4ad96f801097468feaafe1ba17c2c2f461d

  • SSDEEP

    12288:D+RM1l85GBqJ7dInwNhm3bCHdI9ezxp6L:DuM1l8VRcy83b/y36L

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      a57b534715ba56f5f9f9f27b0d57ad34_JaffaCakes118

    • Size

      544KB

    • MD5

      a57b534715ba56f5f9f9f27b0d57ad34

    • SHA1

      0fc07bf4defc689bace1dd256fc096174a916878

    • SHA256

      6ca5031ab0efac1fdc6d3b251072ea93e70d911067995cd367778bfffd2b45a9

    • SHA512

      caf828246b0364607638975914697785b3793f92afdf4c3685b3c1aec85e10e348fd51c237884344c9f033d39508b4ad96f801097468feaafe1ba17c2c2f461d

    • SSDEEP

      12288:D+RM1l85GBqJ7dInwNhm3bCHdI9ezxp6L:DuM1l8VRcy83b/y36L

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks