General

  • Target

    JaffaCakes118_7644b4ad3ea0a1122140a19ea74cffae

  • Size

    594KB

  • Sample

    250107-ym23tsxqhp

  • MD5

    7644b4ad3ea0a1122140a19ea74cffae

  • SHA1

    e0bc94f42ec7a167a81c4f15cf1dade410791b8f

  • SHA256

    fd3f0901f85c93af233169078d2794b9212c7b195b305c15ea20165e29b74017

  • SHA512

    c416ffda8115573bf935586bac556ce973b613141aba9402a6fe39b340a0f5295f36ac03fea0fa2f1b012d30ec9834f0ec8e0cc52ce7039e7b3ef232725f0f2c

  • SSDEEP

    12288:kjFhk56uk78ZRDJQ+IlL8viX1vgOF3DyyeiTCgqrx24rzS:kI8ukIHS+INL1Hm6TRqrAP

Malware Config

Extracted

Family

raccoon

Botnet

eae58d570cc74796157b14c575bd3adc01116ca0

Attributes
  • url4cnc

    http://telegka.top/rino115sipsip

    http://telegin.top/rino115sipsip

    https://t.me/rino115sipsip

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7644b4ad3ea0a1122140a19ea74cffae

    • Size

      594KB

    • MD5

      7644b4ad3ea0a1122140a19ea74cffae

    • SHA1

      e0bc94f42ec7a167a81c4f15cf1dade410791b8f

    • SHA256

      fd3f0901f85c93af233169078d2794b9212c7b195b305c15ea20165e29b74017

    • SHA512

      c416ffda8115573bf935586bac556ce973b613141aba9402a6fe39b340a0f5295f36ac03fea0fa2f1b012d30ec9834f0ec8e0cc52ce7039e7b3ef232725f0f2c

    • SSDEEP

      12288:kjFhk56uk78ZRDJQ+IlL8viX1vgOF3DyyeiTCgqrx24rzS:kI8ukIHS+INL1Hm6TRqrAP

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks