General

  • Target

    JaffaCakes118_fbd0706637cdf875d9b0960a4291f687

  • Size

    582KB

  • Sample

    250111-j4pfqsslex

  • MD5

    fbd0706637cdf875d9b0960a4291f687

  • SHA1

    1505dc4b7b08ff080303d103c5ebbffabc9f49bf

  • SHA256

    a9017566e9e66f032d8112dedb7a41398f0b56f607372d7df9096b555cc4c344

  • SHA512

    f7ebcb0936575bc621544e61161b04341e2f8804d60acc0cc96673fce5d24dceda943225fba954c82306a36ac5bd566f85c94c805eef2ae5eab3ca4f41ac699e

  • SSDEEP

    12288:WhPR/7INdG4FToXOuMrU9m+EeAAcjZatOrlkgsJpAzSsvIdpH:WhJI1NIMrU9xEeArZegsJpwIdpH

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fbd0706637cdf875d9b0960a4291f687

    • Size

      582KB

    • MD5

      fbd0706637cdf875d9b0960a4291f687

    • SHA1

      1505dc4b7b08ff080303d103c5ebbffabc9f49bf

    • SHA256

      a9017566e9e66f032d8112dedb7a41398f0b56f607372d7df9096b555cc4c344

    • SHA512

      f7ebcb0936575bc621544e61161b04341e2f8804d60acc0cc96673fce5d24dceda943225fba954c82306a36ac5bd566f85c94c805eef2ae5eab3ca4f41ac699e

    • SSDEEP

      12288:WhPR/7INdG4FToXOuMrU9m+EeAAcjZatOrlkgsJpAzSsvIdpH:WhJI1NIMrU9xEeArZegsJpwIdpH

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks