General

  • Target

    JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

  • Size

    585KB

  • Sample

    250109-e9jp8ayme1

  • MD5

    bdc6b21531065259073f1a9afc6bebf7

  • SHA1

    98645de89bd1d4381924c8a6f3b8ec388c5b829e

  • SHA256

    a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b

  • SHA512

    c317f103096258c1344f2678ae0982b875de8faf169c0d6878524c2718f9326762923b729fdde474ef643dd95a7aa10c62560708facd4fc168635a0fc11cbedb

  • SSDEEP

    12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8d:Ul00+SUdN2ufe6JQmLgRvIoJ

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bdc6b21531065259073f1a9afc6bebf7

    • Size

      585KB

    • MD5

      bdc6b21531065259073f1a9afc6bebf7

    • SHA1

      98645de89bd1d4381924c8a6f3b8ec388c5b829e

    • SHA256

      a5be7c9c4ee2f2a3ea993fc25347a0428d9816a915019ce773ba6dbebb44ea2b

    • SHA512

      c317f103096258c1344f2678ae0982b875de8faf169c0d6878524c2718f9326762923b729fdde474ef643dd95a7aa10c62560708facd4fc168635a0fc11cbedb

    • SSDEEP

      12288:UVn00+SUKozN2uh98MehrM7jFQH/+83NLSyqgEWvYFcTfh8d:Ul00+SUdN2ufe6JQmLgRvIoJ

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks