General

  • Target

    JaffaCakes118_4499e57e2229dd5f6633cb2044fbce96

  • Size

    512KB

  • Sample

    250107-bd8spawqbs

  • MD5

    4499e57e2229dd5f6633cb2044fbce96

  • SHA1

    2bbee69adffdd90ca84e52e9572cf4ca3bb2f9d1

  • SHA256

    6e7c47dcc770e7c8461ebff3feeeb6121836a115369f95ec5ae2ab485611d7a5

  • SHA512

    b5b8ea0c8deecc784cd091ebc3a6baed5f7cc828fa436fe2499227d7ed06c0b25538598c9f8b7d587045bb2d7ad2dcb183f09a16d71759d684b184b8df600fdd

  • SSDEEP

    12288:DiZeJugrIJ+mIc+Lw/2d43lk+cTSu5HvAXx:Deeq+3cWwed43l8RH

Malware Config

Extracted

Family

raccoon

Botnet

723d14b565e8f39294f31f86b0ce56cdaee75105

Attributes
  • url4cnc

    http://telegatt.top/jdiamond13

    http://telegka.top/jdiamond13

    http://telegin.top/jdiamond13

    https://t.me/jdiamond13

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4499e57e2229dd5f6633cb2044fbce96

    • Size

      512KB

    • MD5

      4499e57e2229dd5f6633cb2044fbce96

    • SHA1

      2bbee69adffdd90ca84e52e9572cf4ca3bb2f9d1

    • SHA256

      6e7c47dcc770e7c8461ebff3feeeb6121836a115369f95ec5ae2ab485611d7a5

    • SHA512

      b5b8ea0c8deecc784cd091ebc3a6baed5f7cc828fa436fe2499227d7ed06c0b25538598c9f8b7d587045bb2d7ad2dcb183f09a16d71759d684b184b8df600fdd

    • SSDEEP

      12288:DiZeJugrIJ+mIc+Lw/2d43lk+cTSu5HvAXx:Deeq+3cWwed43l8RH

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks