General

  • Target

    JaffaCakes118_15c7670dab667067462c3611608ae2f0f82a769505864c938d60052961635d46

  • Size

    726.5MB

  • Sample

    241221-267n7stmcq

  • MD5

    ad5d719d2fe5dfd3fbd7323f9160f063

  • SHA1

    c22978b28d6b1bbd7e4db5e8ba6dbc4ef3770307

  • SHA256

    15c7670dab667067462c3611608ae2f0f82a769505864c938d60052961635d46

  • SHA512

    83cdf7ef24f4de6eb57cca1fc8aa5799174149cccd671a454cf1483147c40aaa11f1a8e05f67726c18438bdfaf66f3e215ad804d77cd86827e155460f7ec3b12

  • SSDEEP

    196608:n6aFTLWxuCfpS30nE28KmfPW8kmLzTBL2dgs:6aFfgu2S34E28KH8zLZvs

Malware Config

Extracted

Family

raccoon

Botnet

0062ae70f0378e03631420cc67ae0a12

C2

http://193.37.213.23/

Attributes
  • user_agent

    23591

xor.plain

Targets

    • Target

      JaffaCakes118_15c7670dab667067462c3611608ae2f0f82a769505864c938d60052961635d46

    • Size

      726.5MB

    • MD5

      ad5d719d2fe5dfd3fbd7323f9160f063

    • SHA1

      c22978b28d6b1bbd7e4db5e8ba6dbc4ef3770307

    • SHA256

      15c7670dab667067462c3611608ae2f0f82a769505864c938d60052961635d46

    • SHA512

      83cdf7ef24f4de6eb57cca1fc8aa5799174149cccd671a454cf1483147c40aaa11f1a8e05f67726c18438bdfaf66f3e215ad804d77cd86827e155460f7ec3b12

    • SSDEEP

      196608:n6aFTLWxuCfpS30nE28KmfPW8kmLzTBL2dgs:6aFfgu2S34E28KH8zLZvs

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks