General

  • Target

    JaffaCakes118_de29cc9b8ebddd428617359ccdf9eb04

  • Size

    594KB

  • Sample

    250110-h37p9awpfx

  • MD5

    de29cc9b8ebddd428617359ccdf9eb04

  • SHA1

    73838074167d961f2fb34af4ccbaf1135ab31d54

  • SHA256

    ea35181753363a426ec2114c24bb445b642445698b5c3e419314b964ce60defb

  • SHA512

    4755a4001b5989546f40e4319c20290c3ad7c92cfa0105fb21a0559248c40bd76aa129c6f34d4c7274ecc583a374264bdb8a93429703d93eadf7179c5499772e

  • SSDEEP

    12288:1XdSQLfW3i7ExfhXbP5fI0G3OXwbVgLz7cE7odJjA0gZrRZo1GI7dj/R5zamDIcY:1tSY0i7Ex5XbW0G+P7J7CJs04qGm/R5v

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_de29cc9b8ebddd428617359ccdf9eb04

    • Size

      594KB

    • MD5

      de29cc9b8ebddd428617359ccdf9eb04

    • SHA1

      73838074167d961f2fb34af4ccbaf1135ab31d54

    • SHA256

      ea35181753363a426ec2114c24bb445b642445698b5c3e419314b964ce60defb

    • SHA512

      4755a4001b5989546f40e4319c20290c3ad7c92cfa0105fb21a0559248c40bd76aa129c6f34d4c7274ecc583a374264bdb8a93429703d93eadf7179c5499772e

    • SSDEEP

      12288:1XdSQLfW3i7ExfhXbP5fI0G3OXwbVgLz7cE7odJjA0gZrRZo1GI7dj/R5zamDIcY:1tSY0i7Ex5XbW0G+P7J7CJs04qGm/R5v

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks