General

  • Target

    45fa2057834af98cc20e003c27d9fa38_JaffaCakes118

  • Size

    543KB

  • Sample

    241015-fpa31szgrr

  • MD5

    45fa2057834af98cc20e003c27d9fa38

  • SHA1

    f94bdaea3396ab6371329a6f11051021dac4b1ad

  • SHA256

    162314c26a818c5d5afb76a6d91faa9af8679042cda8d2ae86311c6f582d3cff

  • SHA512

    b40b08336c8e6c6732d4bef034b1f35a2753762866e6483f346e9676be3b50fd249ac48b97d1a64997675e679b58199ba053e6bc771d480876587bacdc840095

  • SSDEEP

    12288:NIlyOvywQ0Ln6z2dKlwPU3bwUxrBKkUixho:NEFyd0WK2wPQbwglS4C

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      45fa2057834af98cc20e003c27d9fa38_JaffaCakes118

    • Size

      543KB

    • MD5

      45fa2057834af98cc20e003c27d9fa38

    • SHA1

      f94bdaea3396ab6371329a6f11051021dac4b1ad

    • SHA256

      162314c26a818c5d5afb76a6d91faa9af8679042cda8d2ae86311c6f582d3cff

    • SHA512

      b40b08336c8e6c6732d4bef034b1f35a2753762866e6483f346e9676be3b50fd249ac48b97d1a64997675e679b58199ba053e6bc771d480876587bacdc840095

    • SSDEEP

      12288:NIlyOvywQ0Ln6z2dKlwPU3bwUxrBKkUixho:NEFyd0WK2wPQbwglS4C

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks