General

  • Target

    JaffaCakes118_ed2509cb1d6f21b2b75b32a3fcb51286

  • Size

    512KB

  • Sample

    250110-yzwftavpfy

  • MD5

    ed2509cb1d6f21b2b75b32a3fcb51286

  • SHA1

    0c3424b111077c95e4b923542a4e2b0db35ba3be

  • SHA256

    c63fcdb86c848ccf21797b002a27dbff66cabe1a20e87e1d4a6cbc880301bc18

  • SHA512

    f6f3384e75150af4766ba23a25e68759f241ed14f5051c13e80e3f6d7bbf50fa10f91b242187fdebdb7893c7602d6cb63709649217ddeaafae8af15bdc3ed7ea

  • SSDEEP

    12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxD3:gmWDkvf7TnAxaL+9tF

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ed2509cb1d6f21b2b75b32a3fcb51286

    • Size

      512KB

    • MD5

      ed2509cb1d6f21b2b75b32a3fcb51286

    • SHA1

      0c3424b111077c95e4b923542a4e2b0db35ba3be

    • SHA256

      c63fcdb86c848ccf21797b002a27dbff66cabe1a20e87e1d4a6cbc880301bc18

    • SHA512

      f6f3384e75150af4766ba23a25e68759f241ed14f5051c13e80e3f6d7bbf50fa10f91b242187fdebdb7893c7602d6cb63709649217ddeaafae8af15bdc3ed7ea

    • SSDEEP

      12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxD3:gmWDkvf7TnAxaL+9tF

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks