General

  • Target

    8b4a9f00468fa1d5e82fc49a92c262d0_JaffaCakes118

  • Size

    495KB

  • Sample

    241103-nr1qfstcqp

  • MD5

    8b4a9f00468fa1d5e82fc49a92c262d0

  • SHA1

    110129bb996be0c2345da5c0887654d54302d0a5

  • SHA256

    0cc1fcddee9ba997b1dcf12589aa058514d80977c6e2c5041425a89ba6a2b246

  • SHA512

    35535227fea3bab41975a66ea9996e2d7d7b073e834826f06632dda2834fb4e9bbb04bc2c655e81cc6ac61bb0640a2c3d8a153914e8c9fdc4a4ade4d2cf5afaa

  • SSDEEP

    12288:Lp2/HZfW3xkLtyVf8lF0s9bb3dDeZTY4kvShmW3S:0P1Wax4fkFVbb3dOc4k3

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      8b4a9f00468fa1d5e82fc49a92c262d0_JaffaCakes118

    • Size

      495KB

    • MD5

      8b4a9f00468fa1d5e82fc49a92c262d0

    • SHA1

      110129bb996be0c2345da5c0887654d54302d0a5

    • SHA256

      0cc1fcddee9ba997b1dcf12589aa058514d80977c6e2c5041425a89ba6a2b246

    • SHA512

      35535227fea3bab41975a66ea9996e2d7d7b073e834826f06632dda2834fb4e9bbb04bc2c655e81cc6ac61bb0640a2c3d8a153914e8c9fdc4a4ade4d2cf5afaa

    • SSDEEP

      12288:Lp2/HZfW3xkLtyVf8lF0s9bb3dDeZTY4kvShmW3S:0P1Wax4fkFVbb3dOc4k3

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks