General

  • Target

    d3516b42cbf8ec0e32bb8eee99c8d4ff_JaffaCakes118

  • Size

    540KB

  • Sample

    240908-cvtwjazbkq

  • MD5

    d3516b42cbf8ec0e32bb8eee99c8d4ff

  • SHA1

    225fa78451c46db2fb6ccc4e0e24d68e2cc40222

  • SHA256

    466e30f40aaf378a0f65aeef035fdd10fd87f6fc432ddbeebef94913a0580a6c

  • SHA512

    d4af508e2be35cc7f6413d5ce88470f9744beda50befe48dbd686f94e5d4eab737fe89fb4c8510239d3f147768a76105b3fe5fb71aebd0875d88fa6d35e2218b

  • SSDEEP

    12288:gPviKuS4AZjzNGmydnkdXFxpgUpITyrUXKwWsKiSwDRq1g+:gPvWSXjzNNydnktppUazsKIRq13

Malware Config

Extracted

Family

raccoon

Botnet

af579f05f628552dbe148f730b58ef566293198c

Attributes
  • url4cnc

    https://drive.google.com/uc?export=download&id=1iNEp1vSw2ffa15BmPVxfNbK3IsHEHHis

rc4.plain
rc4.plain

Targets

    • Target

      d3516b42cbf8ec0e32bb8eee99c8d4ff_JaffaCakes118

    • Size

      540KB

    • MD5

      d3516b42cbf8ec0e32bb8eee99c8d4ff

    • SHA1

      225fa78451c46db2fb6ccc4e0e24d68e2cc40222

    • SHA256

      466e30f40aaf378a0f65aeef035fdd10fd87f6fc432ddbeebef94913a0580a6c

    • SHA512

      d4af508e2be35cc7f6413d5ce88470f9744beda50befe48dbd686f94e5d4eab737fe89fb4c8510239d3f147768a76105b3fe5fb71aebd0875d88fa6d35e2218b

    • SSDEEP

      12288:gPviKuS4AZjzNGmydnkdXFxpgUpITyrUXKwWsKiSwDRq1g+:gPvWSXjzNNydnktppUazsKIRq13

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks