General

  • Target

    JaffaCakes118_5634b90ed54cc8a663481394cd113d1e9851e263b0ff85e21bf1dcb361fe80f1

  • Size

    1.4MB

  • Sample

    241223-xdsblaxncv

  • MD5

    950a7c97ac9097188a01b7c3aade53fc

  • SHA1

    04f664017070bbfa66cc8f29ebdc0179172875fb

  • SHA256

    5634b90ed54cc8a663481394cd113d1e9851e263b0ff85e21bf1dcb361fe80f1

  • SHA512

    9bf0ad0b45d44699aea7c9019db51c6e8be0d072146740c0e8ec07131ec81953360d2406ae96894c709fe12441b6a54fc331a2383547a8ea8f4385a690c7d7f7

  • SSDEEP

    24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFvey:rWB7rFDp1cFm

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      JaffaCakes118_5634b90ed54cc8a663481394cd113d1e9851e263b0ff85e21bf1dcb361fe80f1

    • Size

      1.4MB

    • MD5

      950a7c97ac9097188a01b7c3aade53fc

    • SHA1

      04f664017070bbfa66cc8f29ebdc0179172875fb

    • SHA256

      5634b90ed54cc8a663481394cd113d1e9851e263b0ff85e21bf1dcb361fe80f1

    • SHA512

      9bf0ad0b45d44699aea7c9019db51c6e8be0d072146740c0e8ec07131ec81953360d2406ae96894c709fe12441b6a54fc331a2383547a8ea8f4385a690c7d7f7

    • SSDEEP

      24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFvey:rWB7rFDp1cFm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks