General

  • Target

    JaffaCakes118_29af359e163bb87db4add88692679a69

  • Size

    582KB

  • Sample

    241231-vey5esslar

  • MD5

    29af359e163bb87db4add88692679a69

  • SHA1

    e17f567ed0e82e6bc4ff4ac371e800d64ba2dc9f

  • SHA256

    937626d18f1e68354b43aefc092e7833333b219fce7648ca28b94f2f46f13b10

  • SHA512

    df1cfcfd00693d0a52e76bbc828cd0dadd3aef152cec6e80f9423e830c74c9ccb84b8f0c1001c4600623234f452792882f2a8d1e8d367582ff1e66f0e989ebcd

  • SSDEEP

    12288:aCPgIo5dcYXMdDscxhktdu2tLAA2PzadLrY/bswcAaSqjO:aCoICdcyMscKPLANzpbswcg

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_29af359e163bb87db4add88692679a69

    • Size

      582KB

    • MD5

      29af359e163bb87db4add88692679a69

    • SHA1

      e17f567ed0e82e6bc4ff4ac371e800d64ba2dc9f

    • SHA256

      937626d18f1e68354b43aefc092e7833333b219fce7648ca28b94f2f46f13b10

    • SHA512

      df1cfcfd00693d0a52e76bbc828cd0dadd3aef152cec6e80f9423e830c74c9ccb84b8f0c1001c4600623234f452792882f2a8d1e8d367582ff1e66f0e989ebcd

    • SSDEEP

      12288:aCPgIo5dcYXMdDscxhktdu2tLAA2PzadLrY/bswcAaSqjO:aCoICdcyMscKPLANzpbswcg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks