General

  • Target

    JaffaCakes118_ab9e5ea06c7a9b6d7aef25faecc2e201

  • Size

    582KB

  • Sample

    250105-r85yaaxles

  • MD5

    ab9e5ea06c7a9b6d7aef25faecc2e201

  • SHA1

    d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2

  • SHA256

    55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a

  • SHA512

    6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083

  • SSDEEP

    12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK

Malware Config

Extracted

Family

raccoon

Botnet

8c69c4053271058a3682c21034b535473162bdfb

Attributes
  • url4cnc

    http://telegatt.top/hiioBlacklight1

    http://telegka.top/hiioBlacklight1

    http://telegin.top/hiioBlacklight1

    https://t.me/hiioBlacklight1

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ab9e5ea06c7a9b6d7aef25faecc2e201

    • Size

      582KB

    • MD5

      ab9e5ea06c7a9b6d7aef25faecc2e201

    • SHA1

      d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2

    • SHA256

      55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a

    • SHA512

      6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083

    • SSDEEP

      12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks