General

  • Target

    0572499533923a33875c0d9e471616f4_JaffaCakes118

  • Size

    542KB

  • Sample

    241001-mekyssycrf

  • MD5

    0572499533923a33875c0d9e471616f4

  • SHA1

    9d232ac7f2c85abb39635505d9995353e9d631e7

  • SHA256

    62486d3dc839eb292fe97e0c8d1a3d595cfbd947347c035ccfb7f9ac2cae4d54

  • SHA512

    000022d884453c33f9363b2c753c84e2bfed375d8531e06cb4214f85221761e52c6362af4649074e500962fab6d6cfe9723d258469b49e2f32e566c14e6f3525

  • SSDEEP

    12288:vs0EJl3h1mNM5aA9gVm48lpGJ5CF48u1yw42nzeR6:v5Q3h1pIm48nGJ7BLzeR6

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      0572499533923a33875c0d9e471616f4_JaffaCakes118

    • Size

      542KB

    • MD5

      0572499533923a33875c0d9e471616f4

    • SHA1

      9d232ac7f2c85abb39635505d9995353e9d631e7

    • SHA256

      62486d3dc839eb292fe97e0c8d1a3d595cfbd947347c035ccfb7f9ac2cae4d54

    • SHA512

      000022d884453c33f9363b2c753c84e2bfed375d8531e06cb4214f85221761e52c6362af4649074e500962fab6d6cfe9723d258469b49e2f32e566c14e6f3525

    • SSDEEP

      12288:vs0EJl3h1mNM5aA9gVm48lpGJ5CF48u1yw42nzeR6:v5Q3h1pIm48nGJ7BLzeR6

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks