General

  • Target

    JaffaCakes118_0aeb3be326df43129cfb31d10aea8c10

  • Size

    512KB

  • Sample

    241231-ja3fha1kbr

  • MD5

    0aeb3be326df43129cfb31d10aea8c10

  • SHA1

    7442e98726a1d5d9133f3172588b16d793158e8e

  • SHA256

    fbe7eee5f2cc32b619fd3620ab5000a77786e59c29b2c635b4cc4b82e8c7c9b5

  • SHA512

    cbc53a813c3e1fc6849c7ce176cd3e7d78b6e2f52fa94ff1f7aa6457e220111ebddf96dcaa1a466bae4e0a2af3b7b31a1f6bd988ffb5acef1e4fefc07035136f

  • SSDEEP

    12288:KnAvbugs1YN5OuIg10tiFQO/WZScKAtgzHDd3xg0QiuB76sel:NvbDVIFYzWwAkh35o7

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0aeb3be326df43129cfb31d10aea8c10

    • Size

      512KB

    • MD5

      0aeb3be326df43129cfb31d10aea8c10

    • SHA1

      7442e98726a1d5d9133f3172588b16d793158e8e

    • SHA256

      fbe7eee5f2cc32b619fd3620ab5000a77786e59c29b2c635b4cc4b82e8c7c9b5

    • SHA512

      cbc53a813c3e1fc6849c7ce176cd3e7d78b6e2f52fa94ff1f7aa6457e220111ebddf96dcaa1a466bae4e0a2af3b7b31a1f6bd988ffb5acef1e4fefc07035136f

    • SSDEEP

      12288:KnAvbugs1YN5OuIg10tiFQO/WZScKAtgzHDd3xg0QiuB76sel:NvbDVIFYzWwAkh35o7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks