General

  • Target

    JaffaCakes118_f21e8642fe85c1016119f5b7714bf60d

  • Size

    512KB

  • Sample

    250111-al8bfsxkhp

  • MD5

    f21e8642fe85c1016119f5b7714bf60d

  • SHA1

    b62f6bf58bccbba7d3ee7f8bb2ba21697d8a8c01

  • SHA256

    d529804a443b04025e28f133b908919cbef0b400383ddcf6d14d329dcad4f516

  • SHA512

    1b553cf3b815865bf9b3fab30e1cc173ff780806def48ac203a3d6a0e6a722c99881ce65c215270ed94fdf7f00a83261fc24c6a2ccd5a4f21420054a06a10a45

  • SSDEEP

    12288:eSn56CXuSKoZEg7urBYs9yDTu1ZDhESAShdCuRua5BX:eC5BzZE6vs9yDiXhEMLu

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f21e8642fe85c1016119f5b7714bf60d

    • Size

      512KB

    • MD5

      f21e8642fe85c1016119f5b7714bf60d

    • SHA1

      b62f6bf58bccbba7d3ee7f8bb2ba21697d8a8c01

    • SHA256

      d529804a443b04025e28f133b908919cbef0b400383ddcf6d14d329dcad4f516

    • SHA512

      1b553cf3b815865bf9b3fab30e1cc173ff780806def48ac203a3d6a0e6a722c99881ce65c215270ed94fdf7f00a83261fc24c6a2ccd5a4f21420054a06a10a45

    • SSDEEP

      12288:eSn56CXuSKoZEg7urBYs9yDTu1ZDhESAShdCuRua5BX:eC5BzZE6vs9yDiXhEMLu

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks