General

  • Target

    JaffaCakes118_787d7fe12ead5fc31da3ac6d5bb4e1e5

  • Size

    567KB

  • Sample

    250104-jjqs3azlhz

  • MD5

    787d7fe12ead5fc31da3ac6d5bb4e1e5

  • SHA1

    c8b8921b95548ca5bfdb3aeaae6829b07a160064

  • SHA256

    942353c71456ab1a0448ae9ea161cdb10cf85770e577d39c2f660193bc3efe9b

  • SHA512

    bcdb85113b1a0616cf4d0b2183ce1522267fb3f4dc4dd71603c766011f82b17b5ccf7d4a76945f7350670107091673f9a6b4e2ffb78482780f8953ecc9f168c8

  • SSDEEP

    12288:DHazHW9ypodExl1Sb/7npw20tZJhTTlafwX6A/G1RO:DHabppyE3e/7pwhPFBKCG3

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

a88535c74ffd32b2b194b8f5512e3cc6a1ebc76a

Attributes
  • url4cnc

    http://telemirror.top/hellobyegain

    http://tgmirror.top/hellobyegain

    http://telegatt.top/hellobyegain

    http://telegka.top/hellobyegain

    http://telegin.top/hellobyegain

    https://t.me/hellobyegain

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_787d7fe12ead5fc31da3ac6d5bb4e1e5

    • Size

      567KB

    • MD5

      787d7fe12ead5fc31da3ac6d5bb4e1e5

    • SHA1

      c8b8921b95548ca5bfdb3aeaae6829b07a160064

    • SHA256

      942353c71456ab1a0448ae9ea161cdb10cf85770e577d39c2f660193bc3efe9b

    • SHA512

      bcdb85113b1a0616cf4d0b2183ce1522267fb3f4dc4dd71603c766011f82b17b5ccf7d4a76945f7350670107091673f9a6b4e2ffb78482780f8953ecc9f168c8

    • SSDEEP

      12288:DHazHW9ypodExl1Sb/7npw20tZJhTTlafwX6A/G1RO:DHabppyE3e/7pwhPFBKCG3

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks