General

  • Target

    JaffaCakes118_fdea2c67ea2b128439e022de96b55831

  • Size

    583KB

  • Sample

    250111-lv538svqdx

  • MD5

    fdea2c67ea2b128439e022de96b55831

  • SHA1

    dde8a53f784aef73d8cff97bcbb96983648abc37

  • SHA256

    c95971379094212f9a7378869108b0d66da31fbd0b38ca2f8f3191244b40578c

  • SHA512

    e35664e31b66ce2f4596a63e1ba52b7e1947d0b7bb9e98c06ad44e1f8e52158ae1930b8553780891f4f3f675f738f8e991dfb6db88adc85511394a669ccb6f5c

  • SSDEEP

    12288:SEtWSuzDh44+zlHeCcSi+SEICF4dhCddbT/laM5YjK3qcRdWr82TTap3yS11kR:STvzVFmeCs+jWdhgdbMM5YjjcITTaptu

Malware Config

Extracted

Family

raccoon

Botnet

00a63e01f3121d7d8a6a30f0dcebf5e68e8053d8

Attributes
  • url4cnc

    http://telegatt.top/jjbadb0y

    http://telegka.top/jjbadb0y

    http://telegin.top/jjbadb0y

    https://t.me/jjbadb0y

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fdea2c67ea2b128439e022de96b55831

    • Size

      583KB

    • MD5

      fdea2c67ea2b128439e022de96b55831

    • SHA1

      dde8a53f784aef73d8cff97bcbb96983648abc37

    • SHA256

      c95971379094212f9a7378869108b0d66da31fbd0b38ca2f8f3191244b40578c

    • SHA512

      e35664e31b66ce2f4596a63e1ba52b7e1947d0b7bb9e98c06ad44e1f8e52158ae1930b8553780891f4f3f675f738f8e991dfb6db88adc85511394a669ccb6f5c

    • SSDEEP

      12288:SEtWSuzDh44+zlHeCcSi+SEICF4dhCddbT/laM5YjK3qcRdWr82TTap3yS11kR:STvzVFmeCs+jWdhgdbMM5YjjcITTaptu

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks