General

  • Target

    JaffaCakes118_88ccb6e9371464cf1cc508b76c7d50db

  • Size

    581KB

  • Sample

    250108-d2wt5svjej

  • MD5

    88ccb6e9371464cf1cc508b76c7d50db

  • SHA1

    7999fc564e6ccc7de9c9f20f9964cdf71ee4a4a0

  • SHA256

    94036ecca794753179e68c331482c2b42b0c06a067169c8b004fad4e7dda673a

  • SHA512

    4f9140052860b0f4f2d18aac37121d5fb93e6b454645622c0737afbcea04deeed5147c3e5587bc1dfcaf01b2d9288ac03434c32f517db358420c034b8471f947

  • SSDEEP

    12288:c6w3otlTakQxo2biHO4yOFZ11PRnVhMxtUrs7nyv1Ppmdu1DH:c6dv9QxcHOjmlRLMXnyv1fH

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_88ccb6e9371464cf1cc508b76c7d50db

    • Size

      581KB

    • MD5

      88ccb6e9371464cf1cc508b76c7d50db

    • SHA1

      7999fc564e6ccc7de9c9f20f9964cdf71ee4a4a0

    • SHA256

      94036ecca794753179e68c331482c2b42b0c06a067169c8b004fad4e7dda673a

    • SHA512

      4f9140052860b0f4f2d18aac37121d5fb93e6b454645622c0737afbcea04deeed5147c3e5587bc1dfcaf01b2d9288ac03434c32f517db358420c034b8471f947

    • SSDEEP

      12288:c6w3otlTakQxo2biHO4yOFZ11PRnVhMxtUrs7nyv1Ppmdu1DH:c6dv9QxcHOjmlRLMXnyv1fH

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks