Overview

overview

10

Static

static

3

5efcf8c6cb...1b.exe

windows7-x64

10

5efcf8c6cb...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f506230c7b0ae1bce5f164426efb63217cb54ae88b413053b4bf7ce2858ddcee

  • Size

    387KB

  • Sample

    241222-ylek5sxnhp

  • MD5

    a1c8085db1ec640137a9a7bf53f57843

  • SHA1

    4c72a8464c2cbe45215399723bc5f6ff714cd592

  • SHA256

    f506230c7b0ae1bce5f164426efb63217cb54ae88b413053b4bf7ce2858ddcee

  • SHA512

    6e17f1aa910989356df5f4ffc1d31ac2c0e2860d920269709cba449df2e5834026ea15908fafe714f4830c67d299540fb43f4f16e693160f9f210d43b74ad77f

  • SSDEEP

    6144:6tLPz6elO99um8zbfANS485BXN+ku/4tOgGtDAw4D+QD1xOtb+OkpVY4BhxU4pVH:6tLeelOXuDfANSXZA8GLQD1x2iBh/D

Score
10/10
raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      5efcf8c6cb3df9cf1e1e8fb2a4cba7831497c1ada179c1d398639c2dfa82bd1b

    • Size

      743KB

    • MD5

      a6ad1f2f9df684419f7dcfbd083cce11

    • SHA1

      a045e116869ed6afb89725e8090f531dfd6cab60

    • SHA256

      5efcf8c6cb3df9cf1e1e8fb2a4cba7831497c1ada179c1d398639c2dfa82bd1b

    • SHA512

      54e2cb2abc51473dc8a850f8292a2acafa31420fecb802b3362c24a4ddef6b991cf0c4fde6ef377e9caa31749d9b07c66f88bcc62944895e23aac8c153bd248b

    • SSDEEP

      12288:N/1tTk46QbqKYT7PCsj9wptoOgIBbh5MpUAvRfJc0dT+k9h23XBDjaPA7G:N9xn628P9j0WOgIJh5M9JcKKk95PA7

    Score
    10/10
    raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks