General

  • Target

    JaffaCakes118_f66d714b9b21601b3d583f8b168017635fdf2585413585852d433e47ef9835c0

  • Size

    317KB

  • Sample

    241222-ad953svpgq

  • MD5

    e2bbae07e499756ae65bbf9c7c5b5dd8

  • SHA1

    7421f3a1036e0444fae16e1356ba7a5714e22303

  • SHA256

    f66d714b9b21601b3d583f8b168017635fdf2585413585852d433e47ef9835c0

  • SHA512

    a27719697b176edb8f4b2d051f9d704fe36e47c35f473427c5f5da2a31aeb84ae94afd677bd6e13991d95c064e5fb40291c71b039674a1930e1e842b7304d569

  • SSDEEP

    6144:8Ong99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmv+muOJl0nPXSm:hng99iwx4OnBvR12gI4B9ijK+m7Jl0PH

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      a1cc9dadba3e5b7ca4681b03aabf8cbcde4714fa658921662117f0e398c30f4e

    • Size

      600KB

    • MD5

      526056be5f9f6c2959153eb61c782534

    • SHA1

      7ed9f200eee4999b9f90e697ffef07a93462a422

    • SHA256

      a1cc9dadba3e5b7ca4681b03aabf8cbcde4714fa658921662117f0e398c30f4e

    • SHA512

      f8f9d4495f34df24e21631fcdf291979b468e071008142ff5fc2f02220e9580de47c9ce95cac92a7ead035229240760d74117207984bc10027b36326b0260cc6

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tF9PA7G:Mj2v1crE/h7SGF9PA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks