General

  • Target

    JaffaCakes118_fe1244cd2b42eebe3c87f9b89aa08a49c663ad30d897cbe7bb794263e6899762

  • Size

    715.0MB

  • Sample

    241221-wtrjkavqhx

  • MD5

    adb7ace5b740fd7c83cd3e803d14bc10

  • SHA1

    a612de801f1bd0ddd5071792897f7fa01072be96

  • SHA256

    fe1244cd2b42eebe3c87f9b89aa08a49c663ad30d897cbe7bb794263e6899762

  • SHA512

    0134c33c384ff8ff7a5c463ed24c839824df23d7bccb6a46589f524f3e7a0cdd1fa2abc5dce89700cebf25a66723cc8ae6bac704a4fbd8d757b5de40ef960449

  • SSDEEP

    49152:Igd/cfSU9z7mpES+tsoZTenHnnME2VDfaoy1fvrySJKRUrKb8Cop5Iu4I533+cBS:IgGfdhAnME2HSYUrdEI56R

Malware Config

Extracted

Family

raccoon

Botnet

9f0d171e2e037518ce377bdfa9e0ec26

C2

http://77.73.133.0/

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_fe1244cd2b42eebe3c87f9b89aa08a49c663ad30d897cbe7bb794263e6899762

    • Size

      715.0MB

    • MD5

      adb7ace5b740fd7c83cd3e803d14bc10

    • SHA1

      a612de801f1bd0ddd5071792897f7fa01072be96

    • SHA256

      fe1244cd2b42eebe3c87f9b89aa08a49c663ad30d897cbe7bb794263e6899762

    • SHA512

      0134c33c384ff8ff7a5c463ed24c839824df23d7bccb6a46589f524f3e7a0cdd1fa2abc5dce89700cebf25a66723cc8ae6bac704a4fbd8d757b5de40ef960449

    • SSDEEP

      49152:Igd/cfSU9z7mpES+tsoZTenHnnME2VDfaoy1fvrySJKRUrKb8Cop5Iu4I533+cBS:IgGfdhAnME2HSYUrdEI56R

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks