General

  • Target

    JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

  • Size

    593KB

  • Sample

    250106-25xgvatrep

  • MD5

    3fe8d0799c7f1c0991ce653727f9fcff

  • SHA1

    528b656a541e239aeed45cf66e95213a747ed7f7

  • SHA256

    1a1eba19f1b9bc5eb62e70dfeda11fb27f7f79bb4c0aa3936d4e982bc0af41c1

  • SHA512

    4940b0988e7b6900832fdfe9484532f3857c667c447a0f94dcc1c32c82dfec73656cc7f495faca4dd3ae31e6ff5773b44f0c570fd5f5783b2548745d6218fc11

  • SSDEEP

    12288:4ujF6R3CENKFa4DX8gG7MR/1crZMMhEkdorPrCiktL9SY9XcV:4nR3PNKV4gGoCZ5E/Cikt7cV

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3fe8d0799c7f1c0991ce653727f9fcff

    • Size

      593KB

    • MD5

      3fe8d0799c7f1c0991ce653727f9fcff

    • SHA1

      528b656a541e239aeed45cf66e95213a747ed7f7

    • SHA256

      1a1eba19f1b9bc5eb62e70dfeda11fb27f7f79bb4c0aa3936d4e982bc0af41c1

    • SHA512

      4940b0988e7b6900832fdfe9484532f3857c667c447a0f94dcc1c32c82dfec73656cc7f495faca4dd3ae31e6ff5773b44f0c570fd5f5783b2548745d6218fc11

    • SSDEEP

      12288:4ujF6R3CENKFa4DX8gG7MR/1crZMMhEkdorPrCiktL9SY9XcV:4nR3PNKV4gGoCZ5E/Cikt7cV

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks