General

  • Target

    JaffaCakes118_545603e491400025c57027c95ddab32fe69a9a69099165a4f0f7f5a5db975229

  • Size

    600KB

  • Sample

    241223-tlehxstraz

  • MD5

    a80522845d264233370d53123723a2c8

  • SHA1

    c2bf242b967d78b6e081682a95a74fbbe6e69e3f

  • SHA256

    545603e491400025c57027c95ddab32fe69a9a69099165a4f0f7f5a5db975229

  • SHA512

    96f87c436ad292a91170aa851c3a946fba50579ea8686ececc68a8f4e57ccac6994e8cc83592a401511ed146fdea14fdf6fa3d069ce55b5e8b8cbffe645797e4

  • SSDEEP

    12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFpPA7G:Mj2v1crE/h7SGFpPA7

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_545603e491400025c57027c95ddab32fe69a9a69099165a4f0f7f5a5db975229

    • Size

      600KB

    • MD5

      a80522845d264233370d53123723a2c8

    • SHA1

      c2bf242b967d78b6e081682a95a74fbbe6e69e3f

    • SHA256

      545603e491400025c57027c95ddab32fe69a9a69099165a4f0f7f5a5db975229

    • SHA512

      96f87c436ad292a91170aa851c3a946fba50579ea8686ececc68a8f4e57ccac6994e8cc83592a401511ed146fdea14fdf6fa3d069ce55b5e8b8cbffe645797e4

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFpPA7G:Mj2v1crE/h7SGFpPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks