General

  • Target

    JaffaCakes118_9e51c3b7d2cdb72dc430322318ff8a3d

  • Size

    582KB

  • Sample

    250105-mqqnes1qgs

  • MD5

    9e51c3b7d2cdb72dc430322318ff8a3d

  • SHA1

    e9f32c599517f041869e4e4137c98b80d45fcc82

  • SHA256

    3026c89e851c9c6302725d3458e7ac4d398117404002987d785597df5a3cc124

  • SHA512

    f47bc426571a5ab5e08bd75f9ed59c445716219151c7b553dd08d6f74e25c321fb832c067c6a633de22b7e1a89a6d247df47ec219eda3b2f3da47d5e75cf0854

  • SSDEEP

    12288:Vx6/K6TsiuzMNX1fzeRVKxeO8udG1oS06KwHHghfZpt/Zr4r1T/qXSmIBr:Vx6/zsXYXAPucrywngnpQ1T/qm

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9e51c3b7d2cdb72dc430322318ff8a3d

    • Size

      582KB

    • MD5

      9e51c3b7d2cdb72dc430322318ff8a3d

    • SHA1

      e9f32c599517f041869e4e4137c98b80d45fcc82

    • SHA256

      3026c89e851c9c6302725d3458e7ac4d398117404002987d785597df5a3cc124

    • SHA512

      f47bc426571a5ab5e08bd75f9ed59c445716219151c7b553dd08d6f74e25c321fb832c067c6a633de22b7e1a89a6d247df47ec219eda3b2f3da47d5e75cf0854

    • SSDEEP

      12288:Vx6/K6TsiuzMNX1fzeRVKxeO8udG1oS06KwHHghfZpt/Zr4r1T/qXSmIBr:Vx6/zsXYXAPucrywngnpQ1T/qm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks