General

  • Target

    JaffaCakes118_392d5a3626a0f23dfece3a5a22145fbe

  • Size

    512KB

  • Sample

    250106-zcgjtayqbr

  • MD5

    392d5a3626a0f23dfece3a5a22145fbe

  • SHA1

    ac7e3e7118c50870e3bc07c61e20c7647fb311dc

  • SHA256

    4789f0f2d3b211c13af58d0bd9b3c137795e2fc3c7c63e296b2a63cea346a520

  • SHA512

    6c90eeb6cb48911f879e415505fa1090f3584fb89ed7cc5bb784249a833624741d1e48ca7615f4cbf4cbf5de0ffaaff8d9fa69d89f71177c70c183f7f4a9828b

  • SSDEEP

    12288:akuuSPeIeOiO0tAx9mFF9XBs/6Z0ydpQ8wZGEX8cg:atleR6cK2bRsi5LesEa

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_392d5a3626a0f23dfece3a5a22145fbe

    • Size

      512KB

    • MD5

      392d5a3626a0f23dfece3a5a22145fbe

    • SHA1

      ac7e3e7118c50870e3bc07c61e20c7647fb311dc

    • SHA256

      4789f0f2d3b211c13af58d0bd9b3c137795e2fc3c7c63e296b2a63cea346a520

    • SHA512

      6c90eeb6cb48911f879e415505fa1090f3584fb89ed7cc5bb784249a833624741d1e48ca7615f4cbf4cbf5de0ffaaff8d9fa69d89f71177c70c183f7f4a9828b

    • SSDEEP

      12288:akuuSPeIeOiO0tAx9mFF9XBs/6Z0ydpQ8wZGEX8cg:atleR6cK2bRsi5LesEa

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks