General

  • Target

    JaffaCakes118_a8bab26653175f6041d559566da78bc9

  • Size

    542KB

  • Sample

    250108-yjbfpstjdn

  • MD5

    a8bab26653175f6041d559566da78bc9

  • SHA1

    1015bbe13cb1a6c499f6fa973ba7b9d426abad2f

  • SHA256

    5f8f536ed1875a9000e95124de673130eeb923b096bef5365a1d3302978cca26

  • SHA512

    5f5b52678fab358d9f58800b6f6c09c686a2da773562d89f0fbee8339ff599050bb9637d65ff0d3c519bcda88644dcf31fe198105611d8b7bfd1e594000b4e67

  • SSDEEP

    12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGT:93j5K901WfAQOs/9T

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a8bab26653175f6041d559566da78bc9

    • Size

      542KB

    • MD5

      a8bab26653175f6041d559566da78bc9

    • SHA1

      1015bbe13cb1a6c499f6fa973ba7b9d426abad2f

    • SHA256

      5f8f536ed1875a9000e95124de673130eeb923b096bef5365a1d3302978cca26

    • SHA512

      5f5b52678fab358d9f58800b6f6c09c686a2da773562d89f0fbee8339ff599050bb9637d65ff0d3c519bcda88644dcf31fe198105611d8b7bfd1e594000b4e67

    • SSDEEP

      12288:93jKEVV4uHmdZdhBUz1WfAQiHqnj18E3FY5TGT:93j5K901WfAQOs/9T

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks