General

  • Target

    JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

  • Size

    512KB

  • Sample

    241231-tepejsxpdv

  • MD5

    268e78c02a927e1fd332ff635531a2d1

  • SHA1

    20c5ad9e64946cf7285d6eda62075759c618343a

  • SHA256

    68e3a142910403d6d8a6fd941427f0060c18e8f30550b5fe8f4a3ff2ca4992de

  • SHA512

    13f55ae5c61360daac961b5698a0c13687b6887a94c4538167436549172213eb5c097c4a6d0ca352936bde4f2ec7fe795607f8fec5859028faa5bea092ca3fa4

  • SSDEEP

    12288:rr/yVKswDetV/7Ve9FkVkXatOXDvjquxZzUA:XNYNZejk0lDBZ

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_268e78c02a927e1fd332ff635531a2d1

    • Size

      512KB

    • MD5

      268e78c02a927e1fd332ff635531a2d1

    • SHA1

      20c5ad9e64946cf7285d6eda62075759c618343a

    • SHA256

      68e3a142910403d6d8a6fd941427f0060c18e8f30550b5fe8f4a3ff2ca4992de

    • SHA512

      13f55ae5c61360daac961b5698a0c13687b6887a94c4538167436549172213eb5c097c4a6d0ca352936bde4f2ec7fe795607f8fec5859028faa5bea092ca3fa4

    • SSDEEP

      12288:rr/yVKswDetV/7Ve9FkVkXatOXDvjquxZzUA:XNYNZejk0lDBZ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks