General

  • Target

    JaffaCakes118_fba13c8ecc1fb618f5eaf266dfd68f94

  • Size

    583KB

  • Sample

    250111-jx4l3ssje1

  • MD5

    fba13c8ecc1fb618f5eaf266dfd68f94

  • SHA1

    2f520e855f81371f21871dc43f75c5d067f1c891

  • SHA256

    6e930f52dc9cf7c3b54d8b514a9ca4a2f603768e366c6df95519dfec459d0374

  • SHA512

    6634fe4d3e57fab3c16ec19b07ecc31e63795054e8d78d5439e23dd2fc469165f110d0d5012605a081140840fdc87fad66dfe82069e80edf347422adc84e78a5

  • SSDEEP

    12288:nRSBqhaGoigKBssrj9UgLKH2JIBvAjKADmhDkZbR1cryvIvf1D6Ws75:ngghToigKrZUgWWJacKAShSbtIvf1A

Malware Config

Extracted

Family

raccoon

Botnet

7ebf9b416b72a203df65383eec899dc689d2c3d7

Attributes
  • url4cnc

    http://telegatt.top/agrybirdsgamerept

    http://telegka.top/agrybirdsgamerept

    http://telegin.top/agrybirdsgamerept

    https://t.me/agrybirdsgamerept

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fba13c8ecc1fb618f5eaf266dfd68f94

    • Size

      583KB

    • MD5

      fba13c8ecc1fb618f5eaf266dfd68f94

    • SHA1

      2f520e855f81371f21871dc43f75c5d067f1c891

    • SHA256

      6e930f52dc9cf7c3b54d8b514a9ca4a2f603768e366c6df95519dfec459d0374

    • SHA512

      6634fe4d3e57fab3c16ec19b07ecc31e63795054e8d78d5439e23dd2fc469165f110d0d5012605a081140840fdc87fad66dfe82069e80edf347422adc84e78a5

    • SSDEEP

      12288:nRSBqhaGoigKBssrj9UgLKH2JIBvAjKADmhDkZbR1cryvIvf1D6Ws75:ngghToigKrZUgWWJacKAShSbtIvf1A

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks