General

  • Target

    JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388

  • Size

    730.8MB

  • Sample

    241221-12bwas1pcm

  • MD5

    243a3a6bf7890ca39908a0b1435fc554

  • SHA1

    7cc4b371195359aeac6edcfe659218ecd833d6c3

  • SHA256

    0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388

  • SHA512

    13cc7d7a432a5e074c13f8daa424974cb3fd447aeb9a1334780b4885188b6dbc6267dcf7e99e51dd132f307b73654535447b68212ec8d58556db807f8e9248c6

  • SSDEEP

    196608:guDF5ssyfmKJu4fS8xqR5vlfbEpBerajBFuhKezpVR77esXabOm:zrsnrJBj0mpBera1FuhKWp+sKSm

Malware Config

Extracted

Family

raccoon

Botnet

20006ec55ea2d79e735051ae184a687c

C2

http://45.9.74.170

http://77.73.134.43

Attributes
  • user_agent

    901785252112

xor.plain

Targets

    • Target

      JaffaCakes118_0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388

    • Size

      730.8MB

    • MD5

      243a3a6bf7890ca39908a0b1435fc554

    • SHA1

      7cc4b371195359aeac6edcfe659218ecd833d6c3

    • SHA256

      0ab3ded539e985e5cd5745b1f3c03a50280c1b3ffeb916e8e4f037ea74499388

    • SHA512

      13cc7d7a432a5e074c13f8daa424974cb3fd447aeb9a1334780b4885188b6dbc6267dcf7e99e51dd132f307b73654535447b68212ec8d58556db807f8e9248c6

    • SSDEEP

      196608:guDF5ssyfmKJu4fS8xqR5vlfbEpBerajBFuhKezpVR77esXabOm:zrsnrJBj0mpBera1FuhKWp+sKSm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks