General

  • Target

    JaffaCakes118_df3b474727d0fc4f9d702a640013dc8bac07d250826817b0909284957071eab0

  • Size

    600KB

  • Sample

    241221-yrvvbaykbt

  • MD5

    f049c55c76d6e486ef3e1f9439643c58

  • SHA1

    b30c31787324ae72de57cbe20137e5ddee039328

  • SHA256

    df3b474727d0fc4f9d702a640013dc8bac07d250826817b0909284957071eab0

  • SHA512

    fdd3d13b810a2446dc1c76923563ed7cedbf90fc3d62dafa67e5018d6ec76102371fb953fd35610edffe7f445dd6ecca3d3e6d13ddde9801d57d9f4ac62ef29c

  • SSDEEP

    12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFtPA7G:Mj2v1crE/h7SGFtPA7

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_df3b474727d0fc4f9d702a640013dc8bac07d250826817b0909284957071eab0

    • Size

      600KB

    • MD5

      f049c55c76d6e486ef3e1f9439643c58

    • SHA1

      b30c31787324ae72de57cbe20137e5ddee039328

    • SHA256

      df3b474727d0fc4f9d702a640013dc8bac07d250826817b0909284957071eab0

    • SHA512

      fdd3d13b810a2446dc1c76923563ed7cedbf90fc3d62dafa67e5018d6ec76102371fb953fd35610edffe7f445dd6ecca3d3e6d13ddde9801d57d9f4ac62ef29c

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFtPA7G:Mj2v1crE/h7SGFtPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks