General

  • Target

    JaffaCakes118_c1bc0cca3a8784bbc7d5d3e9e47e6ba4

  • Size

    545KB

  • Sample

    250109-hraalssmdz

  • MD5

    c1bc0cca3a8784bbc7d5d3e9e47e6ba4

  • SHA1

    500970243e0e1dd57e2aad4f372da395d639b4a3

  • SHA256

    5d1b978e6d2896796f0f63043ecaa1748c1c7245ccda02115afc5594e3f5e3b1

  • SHA512

    929893f5359493bdcf2d2ba9d08a7fe808219c6a93f7f1433d915c520f84a9b03bd2c642722321b9875c1227672ce0773f76220bbde50aadc71754d82ffadbd5

  • SSDEEP

    6144:E5F0iTFiDhrcU3fx5STh+4bKywROlwA+vgFPcZZIMiCY5V5GZmOLhjMULGwUgDW5:EsiTVTh3eydliw0ZZfzZmOLTGwUgKh1

Malware Config

Extracted

Family

raccoon

Botnet

2f2ad1a1aa093c5a9d17040c8efd5650a99640b5

Attributes
  • url4cnc

    http://telegatt.top/oh12manymarty

    http://telegka.top/oh12manymarty

    http://telegin.top/oh12manymarty

    https://t.me/oh12manymarty

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c1bc0cca3a8784bbc7d5d3e9e47e6ba4

    • Size

      545KB

    • MD5

      c1bc0cca3a8784bbc7d5d3e9e47e6ba4

    • SHA1

      500970243e0e1dd57e2aad4f372da395d639b4a3

    • SHA256

      5d1b978e6d2896796f0f63043ecaa1748c1c7245ccda02115afc5594e3f5e3b1

    • SHA512

      929893f5359493bdcf2d2ba9d08a7fe808219c6a93f7f1433d915c520f84a9b03bd2c642722321b9875c1227672ce0773f76220bbde50aadc71754d82ffadbd5

    • SSDEEP

      6144:E5F0iTFiDhrcU3fx5STh+4bKywROlwA+vgFPcZZIMiCY5V5GZmOLhjMULGwUgDW5:EsiTVTh3eydliw0ZZfzZmOLTGwUgKh1

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks