General

  • Target

    JaffaCakes118_7efe9fc7329a78d32cf8c7f98f068566

  • Size

    561KB

  • Sample

    250105-anrrgsvlez

  • MD5

    7efe9fc7329a78d32cf8c7f98f068566

  • SHA1

    af6b30e7ca4695453251f7d60b85a515004ee9f5

  • SHA256

    49209c0cd75b58e967570eb5a49e9ab2b1533d166c1009e56c242f8e06143ec9

  • SHA512

    0002322f51e4673001f2f619191818a1d8766b7a0808237bde07c3b8fbbe5cf945e648a65cc7f7363f8a93417edadd1d05abe2aa29963bda93e2ebe1e3cd3315

  • SSDEEP

    12288:BcW1HJ+I3MF7H2Jl7XOwIVN5j3vPJxXLT2CQoLm2v0vQGmDc:5JpJlAN93vPjn24mhvP

Malware Config

Extracted

Family

raccoon

Botnet

f101b8d36e5dba77385a11565177c9403f6a2964

Attributes
  • url4cnc

    http://telegatt.top/mailware

    http://telegka.top/mailware

    http://telegin.top/mailware

    https://t.me/mailware

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7efe9fc7329a78d32cf8c7f98f068566

    • Size

      561KB

    • MD5

      7efe9fc7329a78d32cf8c7f98f068566

    • SHA1

      af6b30e7ca4695453251f7d60b85a515004ee9f5

    • SHA256

      49209c0cd75b58e967570eb5a49e9ab2b1533d166c1009e56c242f8e06143ec9

    • SHA512

      0002322f51e4673001f2f619191818a1d8766b7a0808237bde07c3b8fbbe5cf945e648a65cc7f7363f8a93417edadd1d05abe2aa29963bda93e2ebe1e3cd3315

    • SSDEEP

      12288:BcW1HJ+I3MF7H2Jl7XOwIVN5j3vPJxXLT2CQoLm2v0vQGmDc:5JpJlAN93vPjn24mhvP

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks