General

  • Target

    JaffaCakes118_8ca5e0ac91c48be3d9f5822f47bdb429

  • Size

    484KB

  • Sample

    250105-fhtlsavjfm

  • MD5

    8ca5e0ac91c48be3d9f5822f47bdb429

  • SHA1

    77c0ad27868d0d3945e0b7b0d2cbe380167b6436

  • SHA256

    5945abb722b6fc334e3d1de174099dba1fa4e2862eb72509563e22635a759c00

  • SHA512

    2e0a329531b5ca45040223fb494a9fbfe3b1e2f0db06fa7779b6ae1d72304a5a6140e7859f7b1ab5e8903d931b7d1534b2a20335230371866f2d2b8bd04324ad

  • SSDEEP

    12288:dLlTc6jYo1fIfPj/5Lnana/YGY74buRUxELE+QuDncpW5Sm:dxc6jYWf0Pj/Zana/YG44uGxWEruTcpm

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8ca5e0ac91c48be3d9f5822f47bdb429

    • Size

      484KB

    • MD5

      8ca5e0ac91c48be3d9f5822f47bdb429

    • SHA1

      77c0ad27868d0d3945e0b7b0d2cbe380167b6436

    • SHA256

      5945abb722b6fc334e3d1de174099dba1fa4e2862eb72509563e22635a759c00

    • SHA512

      2e0a329531b5ca45040223fb494a9fbfe3b1e2f0db06fa7779b6ae1d72304a5a6140e7859f7b1ab5e8903d931b7d1534b2a20335230371866f2d2b8bd04324ad

    • SSDEEP

      12288:dLlTc6jYo1fIfPj/5Lnana/YGY74buRUxELE+QuDncpW5Sm:dxc6jYWf0Pj/Zana/YG44uGxWEruTcpm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks