General

  • Target

    JaffaCakes118_751bd19dacf6c1cbaad715f41207aae9

  • Size

    566KB

  • Sample

    250107-x56y3axjcm

  • MD5

    751bd19dacf6c1cbaad715f41207aae9

  • SHA1

    c6e615bae4833064c33b1d41c5cc2ba9c1aabe53

  • SHA256

    91b45d805b3f9a86ae5a216363713d690c702ac69e2ee1910f0b6b652735d4b5

  • SHA512

    d488758ac51dce00fcd16890638af921086f0184c624437cbd7b38b8567ff48e0699deaf670218017c172013c7585a6318aa6ec69e72ca8f1882a3236a198018

  • SSDEEP

    12288:UlCiAE3ZDyLochghL/Zo4OvBjFAtCDj7aoXyP3KZKXP:UlCiAWNyLoighbiBZCojCvK0f

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_751bd19dacf6c1cbaad715f41207aae9

    • Size

      566KB

    • MD5

      751bd19dacf6c1cbaad715f41207aae9

    • SHA1

      c6e615bae4833064c33b1d41c5cc2ba9c1aabe53

    • SHA256

      91b45d805b3f9a86ae5a216363713d690c702ac69e2ee1910f0b6b652735d4b5

    • SHA512

      d488758ac51dce00fcd16890638af921086f0184c624437cbd7b38b8567ff48e0699deaf670218017c172013c7585a6318aa6ec69e72ca8f1882a3236a198018

    • SSDEEP

      12288:UlCiAE3ZDyLochghL/Zo4OvBjFAtCDj7aoXyP3KZKXP:UlCiAWNyLoighbiBZCojCvK0f

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks