General

  • Target

    JaffaCakes118_8ad2c5601661f8552195d1450f746848

  • Size

    593KB

  • Sample

    250105-evnqma1mfs

  • MD5

    8ad2c5601661f8552195d1450f746848

  • SHA1

    715348760f282e5a00300906fbd37527720f40ac

  • SHA256

    9115464c05c12c6ef4877fc7d77fdac135d2d809c0d59a48c34c16f18cdc0de2

  • SHA512

    59e2c6691a7c40c5ea0755a2d2f9341084dc8de086591b1b8b6497f7dbb1d66e296fffd3ebeeb37bda21452909314a5adb69da31a2d027903164967e35e1dc12

  • SSDEEP

    12288:Ojs/xS9wX8pmTLkJ8a7rsNIsZ8tGq0QQG8geh3YjljrK86sPbIVGs4OIT:Oj4eG8pmTLunPsJZ8tGq0i815YD6sPb5

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8ad2c5601661f8552195d1450f746848

    • Size

      593KB

    • MD5

      8ad2c5601661f8552195d1450f746848

    • SHA1

      715348760f282e5a00300906fbd37527720f40ac

    • SHA256

      9115464c05c12c6ef4877fc7d77fdac135d2d809c0d59a48c34c16f18cdc0de2

    • SHA512

      59e2c6691a7c40c5ea0755a2d2f9341084dc8de086591b1b8b6497f7dbb1d66e296fffd3ebeeb37bda21452909314a5adb69da31a2d027903164967e35e1dc12

    • SSDEEP

      12288:Ojs/xS9wX8pmTLkJ8a7rsNIsZ8tGq0QQG8geh3YjljrK86sPbIVGs4OIT:Oj4eG8pmTLunPsJZ8tGq0i815YD6sPb5

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks