Overview

overview

10

Static

static

3

JaffaCakes...f7.exe

windows7-x64

10

JaffaCakes...f7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7
  • Size 585KB
  • Sample250109-e9jp8ayme1
  • SHA256 a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7discoverystealer

Malware Config

Extracted

Family

  • raccoon

Botnet

  • 7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target
      JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7
    • Size 585KB
    • SHA256 a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    raccoon7ebf9b416b72a203df65383eec899dc689d2c3d7discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks