General

  • Target

    JaffaCakes118_bb9e7bee97a01aae02cd11a19dc52151

  • Size

    593KB

  • Sample

    250105-y2yzqaxjhp

  • MD5

    bb9e7bee97a01aae02cd11a19dc52151

  • SHA1

    ae50bb1d13fddeb8545c4f3bca32422f19c59031

  • SHA256

    c04c7f92ef82931a20768d5b5c98c3188995ca2e071bfa38697ac844c2267123

  • SHA512

    5dd4ff742604830ab0f8b14dc29354e67a7427f83922954c63f345e7fa2d8a22d5f6d4e351b8cdde964d2cfb29fa3cf4da0c06bbaad233f1c02eb601dd8bda75

  • SSDEEP

    12288:Qz1X7hARH2URW4Sp4jYcEsOaiS15WAMCk5115q5TuO6m/ruj88e2U4GXRt:QzZ76zJYjsOatOAMBv52aOA88e2wt

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bb9e7bee97a01aae02cd11a19dc52151

    • Size

      593KB

    • MD5

      bb9e7bee97a01aae02cd11a19dc52151

    • SHA1

      ae50bb1d13fddeb8545c4f3bca32422f19c59031

    • SHA256

      c04c7f92ef82931a20768d5b5c98c3188995ca2e071bfa38697ac844c2267123

    • SHA512

      5dd4ff742604830ab0f8b14dc29354e67a7427f83922954c63f345e7fa2d8a22d5f6d4e351b8cdde964d2cfb29fa3cf4da0c06bbaad233f1c02eb601dd8bda75

    • SSDEEP

      12288:Qz1X7hARH2URW4Sp4jYcEsOaiS15WAMCk5115q5TuO6m/ruj88e2U4GXRt:QzZ76zJYjsOatOAMBv52aOA88e2wt

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks