General

  • Target

    0ec29ace31a4ced1e8a47792f1bdb019_JaffaCakes118

  • Size

    542KB

  • Sample

    241003-j9jgnsxcre

  • MD5

    0ec29ace31a4ced1e8a47792f1bdb019

  • SHA1

    052f5b6f436b0ccf563da481d4de5dc10061432f

  • SHA256

    fc0b0b0e0547233cccd421d1453308714afa1340e59c199dd8dbbb8f6d8c8217

  • SHA512

    49dad111413ea9733934bd74bedccc9cd496d59cd8045a63fd1f6e1336e046d3ccdc821d141d0e840afbb49730d56c272fd24b7a9f68057390f43b15c135323a

  • SSDEEP

    12288:pQuEjX3y5sdbaO+A2zRXuFDIOWtmYXmBq5BSPKYJxwLe:pL83y5JnzF8IOwf221YJSLe

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      0ec29ace31a4ced1e8a47792f1bdb019_JaffaCakes118

    • Size

      542KB

    • MD5

      0ec29ace31a4ced1e8a47792f1bdb019

    • SHA1

      052f5b6f436b0ccf563da481d4de5dc10061432f

    • SHA256

      fc0b0b0e0547233cccd421d1453308714afa1340e59c199dd8dbbb8f6d8c8217

    • SHA512

      49dad111413ea9733934bd74bedccc9cd496d59cd8045a63fd1f6e1336e046d3ccdc821d141d0e840afbb49730d56c272fd24b7a9f68057390f43b15c135323a

    • SSDEEP

      12288:pQuEjX3y5sdbaO+A2zRXuFDIOWtmYXmBq5BSPKYJxwLe:pL83y5JnzF8IOwf221YJSLe

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks