General

  • Target

    JaffaCakes118_d233b4bafc2d973cd3cdc3d9da5b4a43

  • Size

    594KB

  • Sample

    250109-zraptasrcr

  • MD5

    d233b4bafc2d973cd3cdc3d9da5b4a43

  • SHA1

    32df50fd9065d91c524e474e1a6c2521218e4a2e

  • SHA256

    4731988323a6211cbf619dd914868c507a1499ffbbd8f58386b8e3820e6c356a

  • SHA512

    7e0f73309ed1a721ee5c1a7a0de0c11b7dd0aeae97939bd7f540600e897d80343f96477098820e987a5dddf8b9519e28a0ea67482045524954b386c467a595a8

  • SSDEEP

    12288:QdWaHaLp1QMuBIh72Bo2NlhmJIQHLPuX6fEnd2A+54XSPTiFXxzG42Esz:Qgz1QMWIVINlhmJrLWX6s2u2TEXxS

Malware Config

Extracted

Family

raccoon

Botnet

1f80eb00f21640d6a48bbe0a818ba92698f728ce

Attributes
  • url4cnc

    http://telegka.top/rockyrocket11

    http://telegin.top/rockyrocket11

    https://t.me/rockyrocket11

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d233b4bafc2d973cd3cdc3d9da5b4a43

    • Size

      594KB

    • MD5

      d233b4bafc2d973cd3cdc3d9da5b4a43

    • SHA1

      32df50fd9065d91c524e474e1a6c2521218e4a2e

    • SHA256

      4731988323a6211cbf619dd914868c507a1499ffbbd8f58386b8e3820e6c356a

    • SHA512

      7e0f73309ed1a721ee5c1a7a0de0c11b7dd0aeae97939bd7f540600e897d80343f96477098820e987a5dddf8b9519e28a0ea67482045524954b386c467a595a8

    • SSDEEP

      12288:QdWaHaLp1QMuBIh72Bo2NlhmJIQHLPuX6fEnd2A+54XSPTiFXxzG42Esz:Qgz1QMWIVINlhmJrLWX6s2u2TEXxS

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks