General

  • Target

    54762bd38a71039a55ac90781ef68432_JaffaCakes118

  • Size

    543KB

  • Sample

    241018-arv83syajq

  • MD5

    54762bd38a71039a55ac90781ef68432

  • SHA1

    05453252fafea42186230603a12d73c286bbe8a2

  • SHA256

    3e64270945ac865803314ae3bb7ab8b854e8f251719bad443f2189c619e0b4b7

  • SHA512

    57a7a0cf09a488647d1891b457f5f59e27ac2d3becc0fa564e21958c77404e94e79796f56e349bfc0ab1aa284c9b6436a55ab20ee96161b4e0e25fc3792120f7

  • SSDEEP

    12288:K1JEkK3AretDXpaIIz9p2840KI+oaBf2AZv3u:KvQ3AryA/28UzBf3Zve

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      54762bd38a71039a55ac90781ef68432_JaffaCakes118

    • Size

      543KB

    • MD5

      54762bd38a71039a55ac90781ef68432

    • SHA1

      05453252fafea42186230603a12d73c286bbe8a2

    • SHA256

      3e64270945ac865803314ae3bb7ab8b854e8f251719bad443f2189c619e0b4b7

    • SHA512

      57a7a0cf09a488647d1891b457f5f59e27ac2d3becc0fa564e21958c77404e94e79796f56e349bfc0ab1aa284c9b6436a55ab20ee96161b4e0e25fc3792120f7

    • SSDEEP

      12288:K1JEkK3AretDXpaIIz9p2840KI+oaBf2AZv3u:KvQ3AryA/28UzBf3Zve

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks