General

  • Target

    JaffaCakes118_aecceca735635c2cf5989e822d45364778535c4c4c4e881393a12cd531431da6

  • Size

    680KB

  • Sample

    241222-jg7c2azjfs

  • MD5

    14beb33459d10a7aec9706861beebdbd

  • SHA1

    fef6b9813757b6d8969e64024416dd0a31ac03ee

  • SHA256

    aecceca735635c2cf5989e822d45364778535c4c4c4e881393a12cd531431da6

  • SHA512

    983be6d47398636d49ea36c2d91be4fa0a2f615e7560b601dc10ab8c0c862e19227c989ba56f43d983320231c8a7e3045f117aecb51ec1c488bf75130045e679

  • SSDEEP

    12288:RdeRen3/xd0UGAFzwn52welvWRVOWUjecnkXd6AyWDhz:RdfvFGAyn5Gecn/AB

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      690d56de241b2d9f7b6f06739a22f02b33e4ca2fb6346a2eec9df55ae12d5388

    • Size

      1.4MB

    • MD5

      6c534fed189b480cd0f21d8a99899b9c

    • SHA1

      1868bf3cfa349c8fde9158f0bb17d4ea01ea9dd6

    • SHA256

      690d56de241b2d9f7b6f06739a22f02b33e4ca2fb6346a2eec9df55ae12d5388

    • SHA512

      66293d4cfe950fe33bc143838bcc020975f2b84935db5c20c2c0bb468558514eb8c61130e13ceb3716016bb532009aaee68dc3e3f0ae82f1869e59aecdb9fbe5

    • SSDEEP

      24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFvei:rWB7rFDp1cFm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks