General

  • Target

    JaffaCakes118_788f45ada2b264a9ea458f7d125571b0

  • Size

    539KB

  • Sample

    250104-jtkpsszqds

  • MD5

    788f45ada2b264a9ea458f7d125571b0

  • SHA1

    cc7cbce75f3f0c2e9eeb5c16f3b0cb690aa46aad

  • SHA256

    75b40afc06895b53f4a90d06c0b6b0e6b72a2c34883dfd151bfbac51701576c0

  • SHA512

    7151982e5270c10869a1bbeb8329ec884aff1ec46925fe0bbbe07c70c3c279fe41c48fbf56835fece6341db772fdd98b142dab66d0d84e3f70422906d74de181

  • SSDEEP

    12288:cFLz8rA4TmF2Gfhk0AYumXdw/9ZO9gEwZGEX8cA0/M:Sk3TORlAYumXo9ZO9ssEv

Malware Config

Extracted

Family

raccoon

Botnet

5249862c20af324bd38c0aae0d5ea8e5ac16674d

Attributes
  • url4cnc

    http://telegatt.top/br33smithyou

    http://telegka.top/br33smithyou

    http://telegin.top/br33smithyou

    https://t.me/br33smithyou

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_788f45ada2b264a9ea458f7d125571b0

    • Size

      539KB

    • MD5

      788f45ada2b264a9ea458f7d125571b0

    • SHA1

      cc7cbce75f3f0c2e9eeb5c16f3b0cb690aa46aad

    • SHA256

      75b40afc06895b53f4a90d06c0b6b0e6b72a2c34883dfd151bfbac51701576c0

    • SHA512

      7151982e5270c10869a1bbeb8329ec884aff1ec46925fe0bbbe07c70c3c279fe41c48fbf56835fece6341db772fdd98b142dab66d0d84e3f70422906d74de181

    • SSDEEP

      12288:cFLz8rA4TmF2Gfhk0AYumXdw/9ZO9gEwZGEX8cA0/M:Sk3TORlAYumXo9ZO9ssEv

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks