General

  • Target

    JaffaCakes118_b11f0af903882827ef1e160d558b51099d8b3396f93f253f10343a866d0cf5e3

  • Size

    394KB

  • Sample

    241222-mvzrwsvrek

  • MD5

    4ecbbb3120cff4d24406f9c052076a7b

  • SHA1

    e5ff7e90a80ae771b73ddfb0765d3fe47e62c443

  • SHA256

    b11f0af903882827ef1e160d558b51099d8b3396f93f253f10343a866d0cf5e3

  • SHA512

    d4dddc75e328a4a6361989f815d9e5e4cce95ef2acc4b76b178643ab94befc7011050144ad6bdf461e6c8ff1a4f4867d2fd6904dbdebc2e2588717e812af0308

  • SSDEEP

    6144:VeBDwAjEAG1GfI/V1q8UWgZzrhEK0ZjjWO1rcU3xm7b7HLoPWxNoddAhRJMxMu:s/AR1GQxcXWjprP3xm7nXxcKhRJYv

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794

    • Size

      755KB

    • MD5

      97b3616a7278b48035e868ebbe74453e

    • SHA1

      e14681a4693dedd18f48e04233394b85feaaba51

    • SHA256

      9bad42bc794306c3ed433fcc5ee6c67fe371002778af06608508fd96a5f7e794

    • SHA512

      e6e25b9ecbfb3b5a1b7683846e977873dcf4737401998fb3ebbcb46d799634902e3a1338cd70bba03694a8aee332d6446b43371b6814f22bb168213d93885240

    • SSDEEP

      12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdR1PA7F7W:civcAzFo0S3v6ZI5+3xBPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks