General

  • Target

    JaffaCakes118_906bf68f10d642ba7f5fb9685249db99

  • Size

    581KB

  • Sample

    250105-gw7w1avles

  • MD5

    906bf68f10d642ba7f5fb9685249db99

  • SHA1

    ddc876cf17c2cc3b38a02f75770522c5cf939ef6

  • SHA256

    cc98ee14bc8504ed2dae9d010c7f209775de51f9f31086814e2fb6b42baa7cb5

  • SHA512

    500a0c0f422e08fb68a292bc8c2a959be653ee1aef9607070d49bd11255da0e60679dc30517b48831c1ae46fb74aeedc325279bccc7bfaac5a88e752a961b223

  • SSDEEP

    12288:hQzY+9+bMw7eyUnFafcqTUiHrC9wahAwgUPHMrpTZg83CJWW4tDM:h69/essQiLwwaFgrZg83LM

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_906bf68f10d642ba7f5fb9685249db99

    • Size

      581KB

    • MD5

      906bf68f10d642ba7f5fb9685249db99

    • SHA1

      ddc876cf17c2cc3b38a02f75770522c5cf939ef6

    • SHA256

      cc98ee14bc8504ed2dae9d010c7f209775de51f9f31086814e2fb6b42baa7cb5

    • SHA512

      500a0c0f422e08fb68a292bc8c2a959be653ee1aef9607070d49bd11255da0e60679dc30517b48831c1ae46fb74aeedc325279bccc7bfaac5a88e752a961b223

    • SSDEEP

      12288:hQzY+9+bMw7eyUnFafcqTUiHrC9wahAwgUPHMrpTZg83CJWW4tDM:h69/essQiLwwaFgrZg83LM

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks