Resubmissions

18-12-2024 12:31

241218-pqhc6azpgj 10

31-03-2024 17:58

240331-wkllysgh26 10

31-03-2024 17:57

240331-wjnd6agb9w 10

31-03-2024 17:52

240331-wf31fagb5w 10

General

  • Target

    59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

  • Size

    562KB

  • Sample

    241218-pqhc6azpgj

  • MD5

    59ff7d1e5dc67270e6a629fc87da34ba

  • SHA1

    525c41353cc2f5706fabe834475efb6227c6851b

  • SHA256

    2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352

  • SHA512

    11845b7e59595f635cd2dce4c04b69b177405403ac66c20668894dd09978858ac9c88dbb14282b5d3f31c8e78d1384f8be41b51de6c968d0b8f47c6a8b562c7a

  • SSDEEP

    12288:NmywsrYuTY4TIYm7gPwI7IpnQzAw298ONmvEFe8KHOx5:AyxYEIYJPd7qQzO6ONxA

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

8d179b9e611eee525425544ee8c6d77360ab7cd9

Attributes
  • url4cnc

    http://teletop.top/agrybirdsgamerept

    http://teleta.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

    • Size

      562KB

    • MD5

      59ff7d1e5dc67270e6a629fc87da34ba

    • SHA1

      525c41353cc2f5706fabe834475efb6227c6851b

    • SHA256

      2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352

    • SHA512

      11845b7e59595f635cd2dce4c04b69b177405403ac66c20668894dd09978858ac9c88dbb14282b5d3f31c8e78d1384f8be41b51de6c968d0b8f47c6a8b562c7a

    • SSDEEP

      12288:NmywsrYuTY4TIYm7gPwI7IpnQzAw298ONmvEFe8KHOx5:AyxYEIYJPd7qQzO6ONxA

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks