General

  • Target

    fc424955edeb6b958bd22a4b2bd6008a_JaffaCakes118

  • Size

    495KB

  • Sample

    241218-tsjq8avkfy

  • MD5

    fc424955edeb6b958bd22a4b2bd6008a

  • SHA1

    91fa0bc92fb6bb3f7f0215ed1d18dca7641e76bb

  • SHA256

    34d118df48cbcbd72911d72e0a2c8e310e21220d95de3ec70ba9c9dd532850f8

  • SHA512

    64ce485425bceb2bc94fd338b8b85905747b3ad1449ee28ecc2d36ca669b6ddfe8d798eb4bcb6ad1135c4f723a11cd7da96a72abc6481bf85ac879033807cb0b

  • SSDEEP

    6144:aegagFeYwBMbsLsZaqihb12sk2oFn3dF1gZFLPSMe6nzxS3gJd4s1Nos206PZjxp:aLaW/wBMjaVk/hgjZYQDN/H2pPZxvR0

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4

Attributes
  • url4cnc

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      fc424955edeb6b958bd22a4b2bd6008a_JaffaCakes118

    • Size

      495KB

    • MD5

      fc424955edeb6b958bd22a4b2bd6008a

    • SHA1

      91fa0bc92fb6bb3f7f0215ed1d18dca7641e76bb

    • SHA256

      34d118df48cbcbd72911d72e0a2c8e310e21220d95de3ec70ba9c9dd532850f8

    • SHA512

      64ce485425bceb2bc94fd338b8b85905747b3ad1449ee28ecc2d36ca669b6ddfe8d798eb4bcb6ad1135c4f723a11cd7da96a72abc6481bf85ac879033807cb0b

    • SSDEEP

      6144:aegagFeYwBMbsLsZaqihb12sk2oFn3dF1gZFLPSMe6nzxS3gJd4s1Nos206PZjxp:aLaW/wBMjaVk/hgjZYQDN/H2pPZxvR0

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks