General

  • Target

    JaffaCakes118_323914da622f742415605a6dcc7ff486

  • Size

    581KB

  • Sample

    241231-ya6kgswjct

  • MD5

    323914da622f742415605a6dcc7ff486

  • SHA1

    b7d62845e91845ba3bbbd939294e8acd399f010f

  • SHA256

    d1b95b79fc284f50c5ab39c03ba1ebbf79714e0127f3addad7a7b97e23c4a74b

  • SHA512

    d076aff4d4f2daf8e6384d61c5cf8734ea857e5cc95fe13f4fada9f354e440ab8f50b311bf8424eeb5e457330a1a9eb6cb9f579276edb44ae15173b670986d2d

  • SSDEEP

    12288:Aqpzz08ZRBW/hwSseaojRVIZ74BBSG3kNkrtbXCMOI2yml0dnKv:A+zzFRWw1XojRVCsBp3FXCM9xdK

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_323914da622f742415605a6dcc7ff486

    • Size

      581KB

    • MD5

      323914da622f742415605a6dcc7ff486

    • SHA1

      b7d62845e91845ba3bbbd939294e8acd399f010f

    • SHA256

      d1b95b79fc284f50c5ab39c03ba1ebbf79714e0127f3addad7a7b97e23c4a74b

    • SHA512

      d076aff4d4f2daf8e6384d61c5cf8734ea857e5cc95fe13f4fada9f354e440ab8f50b311bf8424eeb5e457330a1a9eb6cb9f579276edb44ae15173b670986d2d

    • SSDEEP

      12288:Aqpzz08ZRBW/hwSseaojRVIZ74BBSG3kNkrtbXCMOI2yml0dnKv:A+zzFRWw1XojRVCsBp3FXCM9xdK

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks