General

  • Target

    JaffaCakes118_a98e5747421d901f9018529ee2c2c8749beabdf4c0040f603b19aded61686aae

  • Size

    755KB

  • Sample

    241225-s6vj7sxjh1

  • MD5

    4dc64e7d3e65918d5cc8f4870f018f85

  • SHA1

    b00832d741dd7564c04f3f3cd29dbc9bec971e79

  • SHA256

    a98e5747421d901f9018529ee2c2c8749beabdf4c0040f603b19aded61686aae

  • SHA512

    a4d70825b0ff2e6829e16cd85c5a3df1dddb6e2779285291de11bd2b02d70bb029be4b536de1dfa0beb261b2c88a7d3f5cab6b7918ee3e4a18793c89c2b04791

  • SSDEEP

    12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdRxPA7F7W:civcAzFo0S3v6ZI5+3xtPA7

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_a98e5747421d901f9018529ee2c2c8749beabdf4c0040f603b19aded61686aae

    • Size

      755KB

    • MD5

      4dc64e7d3e65918d5cc8f4870f018f85

    • SHA1

      b00832d741dd7564c04f3f3cd29dbc9bec971e79

    • SHA256

      a98e5747421d901f9018529ee2c2c8749beabdf4c0040f603b19aded61686aae

    • SHA512

      a4d70825b0ff2e6829e16cd85c5a3df1dddb6e2779285291de11bd2b02d70bb029be4b536de1dfa0beb261b2c88a7d3f5cab6b7918ee3e4a18793c89c2b04791

    • SSDEEP

      12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdRxPA7F7W:civcAzFo0S3v6ZI5+3xtPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks