Overview

overview

10

Static

static

3

JaffaCakes...ab.exe

windows7-x64

10

JaffaCakes...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_dec5e9999b176c451659966ed2b4faff2a0d8c2719d695f2a3dda0179b6de1ab

  • Size

    731.0MB

  • Sample

    241222-n3q1dsxkav

  • MD5

    ffb0e16942ee9d0fb384352f8c3d8ced

  • SHA1

    3ea00f50941238eca54cb9452516485b1cddb817

  • SHA256

    dec5e9999b176c451659966ed2b4faff2a0d8c2719d695f2a3dda0179b6de1ab

  • SHA512

    151bdb3da362d5df074603ddc95754db07feab9a7c08a4cbaf96e4fed0c8efe87783e67f83887027a02f50adf7a903049922296ca5a37bbf7080f9ebcbde45a0

  • SSDEEP

    196608:UUJOFXQovEaJV73j5m9iepb+EDGVV3hCKboTEWMw6FO5+3Z4KW:UEfovJ13jk9Xp+VVRJbdwRiDW

Score
10/10
raccoon9429a6d92284fd6d41daa221d04032bediscoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

9429a6d92284fd6d41daa221d04032be

C2

http://212.113.119.153/

http://77.91.84.147/

http://212.113.119.35/

http://79.137.248.245/
Attributes
  • user_agent

    AYAYAYAY1337

xor.plain

Targets

    • Target

      JaffaCakes118_dec5e9999b176c451659966ed2b4faff2a0d8c2719d695f2a3dda0179b6de1ab

    • Size

      731.0MB

    • MD5

      ffb0e16942ee9d0fb384352f8c3d8ced

    • SHA1

      3ea00f50941238eca54cb9452516485b1cddb817

    • SHA256

      dec5e9999b176c451659966ed2b4faff2a0d8c2719d695f2a3dda0179b6de1ab

    • SHA512

      151bdb3da362d5df074603ddc95754db07feab9a7c08a4cbaf96e4fed0c8efe87783e67f83887027a02f50adf7a903049922296ca5a37bbf7080f9ebcbde45a0

    • SSDEEP

      196608:UUJOFXQovEaJV73j5m9iepb+EDGVV3hCKboTEWMw6FO5+3Z4KW:UEfovJ13jk9Xp+VVRJbdwRiDW

    Score
    10/10
    raccoon9429a6d92284fd6d41daa221d04032bediscoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V2 payload

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks