General

  • Target

    JaffaCakes118_a42df11e932df22a57cd2a5acadd0320

  • Size

    513KB

  • Sample

    250108-rmgzbssrcw

  • MD5

    a42df11e932df22a57cd2a5acadd0320

  • SHA1

    2849a283bb5355dd7765af95291031d58280ea50

  • SHA256

    91e9bda74adacf838581b518338ad3c7578dca647e6b3282fb6f4b04f0ff6009

  • SHA512

    9ed4fdc9ab6e00014b486d6cbac1d5839347b045788648b984771b6423d167462f359f42298883fbd8b9e2e27aa01c5a88686df1169883ab1d9ff8c7d2db2bec

  • SSDEEP

    12288:QFwCxfP1WYfrLD4oCOeOzp2md5lFOAxDy:IV18YXz/cMFOAQ

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a42df11e932df22a57cd2a5acadd0320

    • Size

      513KB

    • MD5

      a42df11e932df22a57cd2a5acadd0320

    • SHA1

      2849a283bb5355dd7765af95291031d58280ea50

    • SHA256

      91e9bda74adacf838581b518338ad3c7578dca647e6b3282fb6f4b04f0ff6009

    • SHA512

      9ed4fdc9ab6e00014b486d6cbac1d5839347b045788648b984771b6423d167462f359f42298883fbd8b9e2e27aa01c5a88686df1169883ab1d9ff8c7d2db2bec

    • SSDEEP

      12288:QFwCxfP1WYfrLD4oCOeOzp2md5lFOAxDy:IV18YXz/cMFOAQ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks