General

  • Target

    ecc973cf6a6cd2c803255c9f120d5aaa_JaffaCakes118

  • Size

    548KB

  • Sample

    240920-edhhaaxamf

  • MD5

    ecc973cf6a6cd2c803255c9f120d5aaa

  • SHA1

    f90d672fd09b13364d561acb9e1965d7cdef6a68

  • SHA256

    0f3d1f1eafa140c32e246c12a7ccd5b6205526ad08be581e5f55b9179f19be5a

  • SHA512

    b385f5eb676484862d19aa805a6995f85462e7399e7068cba458b9e362b9dfd1cca12b8fdd7c406f0be2a7bef191b4c6668e4012aae22c6c67436cf8d891ced2

  • SSDEEP

    12288:tqsDzNra3a8OT9SdU52j/C/rGLjTGrI6jQn/Xo/Gzxp6L:tFDzN+OZSm2uD6WknQC36L

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      ecc973cf6a6cd2c803255c9f120d5aaa_JaffaCakes118

    • Size

      548KB

    • MD5

      ecc973cf6a6cd2c803255c9f120d5aaa

    • SHA1

      f90d672fd09b13364d561acb9e1965d7cdef6a68

    • SHA256

      0f3d1f1eafa140c32e246c12a7ccd5b6205526ad08be581e5f55b9179f19be5a

    • SHA512

      b385f5eb676484862d19aa805a6995f85462e7399e7068cba458b9e362b9dfd1cca12b8fdd7c406f0be2a7bef191b4c6668e4012aae22c6c67436cf8d891ced2

    • SSDEEP

      12288:tqsDzNra3a8OT9SdU52j/C/rGLjTGrI6jQn/Xo/Gzxp6L:tFDzN+OZSm2uD6WknQC36L

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks