General

  • Target

    JaffaCakes118_2d33140725e1514186c3ac90f66d99af

  • Size

    582KB

  • Sample

    241231-wlp1rssjfv

  • MD5

    2d33140725e1514186c3ac90f66d99af

  • SHA1

    28a7ef68da4a09bbb44b1d0091927a3fe03391fc

  • SHA256

    ad29facf51efa772eb0f93239a7e2cfcc56f67846871ede690dc49a2ff6cb5de

  • SHA512

    8b6eb0e9af6ac5961102ecff5c0d4ea67b5ad3715112bb0c85aece142a1de6f0d89f785e7924659585c1da5c1ea7c4e0b5d782de7655d0b22250f8ed48f572d0

  • SSDEEP

    12288:uTyptX4By3jD/zEKxCdz0ay5yTY/KLvE60Dri/sMwogWSjk:uESBy3vz+0RcY/yEusMwo

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2d33140725e1514186c3ac90f66d99af

    • Size

      582KB

    • MD5

      2d33140725e1514186c3ac90f66d99af

    • SHA1

      28a7ef68da4a09bbb44b1d0091927a3fe03391fc

    • SHA256

      ad29facf51efa772eb0f93239a7e2cfcc56f67846871ede690dc49a2ff6cb5de

    • SHA512

      8b6eb0e9af6ac5961102ecff5c0d4ea67b5ad3715112bb0c85aece142a1de6f0d89f785e7924659585c1da5c1ea7c4e0b5d782de7655d0b22250f8ed48f572d0

    • SSDEEP

      12288:uTyptX4By3jD/zEKxCdz0ay5yTY/KLvE60Dri/sMwogWSjk:uESBy3vz+0RcY/yEusMwo

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks