General

  • Target

    JaffaCakes118_f23c6725469a4e8bd1a18c089c73b40a

  • Size

    513KB

  • Sample

    250111-are7vsxmcp

  • MD5

    f23c6725469a4e8bd1a18c089c73b40a

  • SHA1

    7d94242df7920a24bc2b90e8155e04ac2d7b3fb5

  • SHA256

    8163ac1eade3c60116eb76ec9c127a6f33e361c89adecf0c7fb1b819ebcfacad

  • SHA512

    8d078d7e12c77eba3b549f20fefd81bf7a0e6951934fde23fe134cef68579b24999efe1513d250711c1bf5c2d3cd1124acccbc9d2c3961cf6d8770c5daf34a02

  • SSDEEP

    12288:x5X5SdkRRDPZWQwXmXf+hHjP8HsesnfZbuz/CSg:xCdCPEBXmv+Eseew/

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f23c6725469a4e8bd1a18c089c73b40a

    • Size

      513KB

    • MD5

      f23c6725469a4e8bd1a18c089c73b40a

    • SHA1

      7d94242df7920a24bc2b90e8155e04ac2d7b3fb5

    • SHA256

      8163ac1eade3c60116eb76ec9c127a6f33e361c89adecf0c7fb1b819ebcfacad

    • SHA512

      8d078d7e12c77eba3b549f20fefd81bf7a0e6951934fde23fe134cef68579b24999efe1513d250711c1bf5c2d3cd1124acccbc9d2c3961cf6d8770c5daf34a02

    • SSDEEP

      12288:x5X5SdkRRDPZWQwXmXf+hHjP8HsesnfZbuz/CSg:xCdCPEBXmv+Eseew/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks