General

  • Target

    JaffaCakes118_198fab6dc61a13432d13142d27a0c5bc

  • Size

    593KB

  • Sample

    250106-kjq99ssjbw

  • MD5

    198fab6dc61a13432d13142d27a0c5bc

  • SHA1

    8a40f9144b34e9b433208abead40a0d73b512740

  • SHA256

    c583e477956be8069d7547206fcf4677292702ce5a4d8ca8d3d5c9bc88fa09ed

  • SHA512

    149a945b66cc99b8f4c38b0de786801bcc159cf12a5901ee5e10dffcd4e17beec8e9ca27e17a3954252b984ba148a440fb5a9aea9ac82792e8341e96f2029765

  • SSDEEP

    12288:fdR1jIZjHKlSF8i7vuxp1sijjxx9CcHaSiaNYzrcLKjW0PeSU:fdRRIZjqlI891Pjjxx9PHGa5KjW0

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_198fab6dc61a13432d13142d27a0c5bc

    • Size

      593KB

    • MD5

      198fab6dc61a13432d13142d27a0c5bc

    • SHA1

      8a40f9144b34e9b433208abead40a0d73b512740

    • SHA256

      c583e477956be8069d7547206fcf4677292702ce5a4d8ca8d3d5c9bc88fa09ed

    • SHA512

      149a945b66cc99b8f4c38b0de786801bcc159cf12a5901ee5e10dffcd4e17beec8e9ca27e17a3954252b984ba148a440fb5a9aea9ac82792e8341e96f2029765

    • SSDEEP

      12288:fdR1jIZjHKlSF8i7vuxp1sijjxx9CcHaSiaNYzrcLKjW0PeSU:fdRRIZjqlI891Pjjxx9PHGa5KjW0

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks