General

  • Target

    JaffaCakes118_1e8fa5296da88fb4780b106c28cf484272b8d71fe706a19fc924cc7c78d34c66

  • Size

    699KB

  • Sample

    241225-a5nfdsslg1

  • MD5

    98498666ad192c0bdc9cf7a0ece05c5c

  • SHA1

    dfa06e838e193c926bc3040d8038b344b92fda71

  • SHA256

    1e8fa5296da88fb4780b106c28cf484272b8d71fe706a19fc924cc7c78d34c66

  • SHA512

    d938d7e10161204acde5f88e267f91dc00edf8382db7dcf6853a14526a4ca441b3f6b5dfe80e296401b10fbe2df831393491acfec2f59e9c2dba674e77b251a5

  • SSDEEP

    12288:lBZilC81tCGJeO5joAsBrSaHxSnq7N8KdXwBkZ+Zgceoo5gSc:lroPuO+vRf8ACs

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      JaffaCakes118_1e8fa5296da88fb4780b106c28cf484272b8d71fe706a19fc924cc7c78d34c66

    • Size

      699KB

    • MD5

      98498666ad192c0bdc9cf7a0ece05c5c

    • SHA1

      dfa06e838e193c926bc3040d8038b344b92fda71

    • SHA256

      1e8fa5296da88fb4780b106c28cf484272b8d71fe706a19fc924cc7c78d34c66

    • SHA512

      d938d7e10161204acde5f88e267f91dc00edf8382db7dcf6853a14526a4ca441b3f6b5dfe80e296401b10fbe2df831393491acfec2f59e9c2dba674e77b251a5

    • SSDEEP

      12288:lBZilC81tCGJeO5joAsBrSaHxSnq7N8KdXwBkZ+Zgceoo5gSc:lroPuO+vRf8ACs

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks