General

  • Target

    1fd204f32823b9ab16d4e9e2caa2b7f5_JaffaCakes118

  • Size

    412KB

  • Sample

    241008-f5xxqavdph

  • MD5

    1fd204f32823b9ab16d4e9e2caa2b7f5

  • SHA1

    05fcc003b47de6508fd7498a4b826e3caf717918

  • SHA256

    952e008ec71b7dab8b7d962b344b9a3e30b072542c490e170283c473e9e897f4

  • SHA512

    90769c0e42c37f7e593c4b54ed4a7db391f2cb1dc8c5f57ef1d6bf267449873670bf30c04e1c602546ef3122b474b3c645980afaf90860797db3967ab2748c20

  • SSDEEP

    6144:TNhuBFtkFkyuEgU424M9xCCuuCLYmH7zvXmGry3ZuT45B6oDaiycqfxeZ:pEXiFnuEHfxrCkmfmeX45B6oDlaeZ

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      1fd204f32823b9ab16d4e9e2caa2b7f5_JaffaCakes118

    • Size

      412KB

    • MD5

      1fd204f32823b9ab16d4e9e2caa2b7f5

    • SHA1

      05fcc003b47de6508fd7498a4b826e3caf717918

    • SHA256

      952e008ec71b7dab8b7d962b344b9a3e30b072542c490e170283c473e9e897f4

    • SHA512

      90769c0e42c37f7e593c4b54ed4a7db391f2cb1dc8c5f57ef1d6bf267449873670bf30c04e1c602546ef3122b474b3c645980afaf90860797db3967ab2748c20

    • SSDEEP

      6144:TNhuBFtkFkyuEgU424M9xCCuuCLYmH7zvXmGry3ZuT45B6oDaiycqfxeZ:pEXiFnuEHfxrCkmfmeX45B6oDlaeZ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks