General

  • Target

    JaffaCakes118_37a770628a74be70d04345ec4faa7f61

  • Size

    512KB

  • Sample

    250106-yrhvrayjhk

  • MD5

    37a770628a74be70d04345ec4faa7f61

  • SHA1

    8539a2af2d78001ff716fd496a29d311f96559f1

  • SHA256

    3231b21f0cc80e1f557e697a4e79ae1d8bde96c4ec75221dda46ff0f797318a0

  • SHA512

    df80c8341cd3421d205e0eaeaa9e3651b9c21e57929a34162e501968e5abfe008f38e741ed1788041e01faff22823eed8934dbf70ef963970b334ae079f986f2

  • SSDEEP

    12288:oDykdg0C7FpRIRfxzl72hef1vDs6ob0fqMcjgSunrCAb6nk:oekdu7NIR9whef1vDRVSVerOk

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_37a770628a74be70d04345ec4faa7f61

    • Size

      512KB

    • MD5

      37a770628a74be70d04345ec4faa7f61

    • SHA1

      8539a2af2d78001ff716fd496a29d311f96559f1

    • SHA256

      3231b21f0cc80e1f557e697a4e79ae1d8bde96c4ec75221dda46ff0f797318a0

    • SHA512

      df80c8341cd3421d205e0eaeaa9e3651b9c21e57929a34162e501968e5abfe008f38e741ed1788041e01faff22823eed8934dbf70ef963970b334ae079f986f2

    • SSDEEP

      12288:oDykdg0C7FpRIRfxzl72hef1vDs6ob0fqMcjgSunrCAb6nk:oekdu7NIR9whef1vDRVSVerOk

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks