General

  • Target

    JaffaCakes118_6a2740fb88205b6840959992c6e9bee70046b4138bfa61d36c68f19c9e2f9de0

  • Size

    317KB

  • Sample

    241225-vrtqgazkhz

  • MD5

    79c7255ac125ea754e1c579153e478f5

  • SHA1

    7d11ccb858df58ec57a38bfd8a807202ceddd27f

  • SHA256

    6a2740fb88205b6840959992c6e9bee70046b4138bfa61d36c68f19c9e2f9de0

  • SHA512

    d5503f3278fec679227f0b0c7002fe6fad6a0da0c69150886917cf4e14a40066ccdb79cfbdba04159418cb88046262ba653a5424fb258e33e3d6ed0d89dbdb61

  • SSDEEP

    6144:fOng99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmvs60fbKQr/+4:mng99iwx4OnBvR12gI4B9ijKsfD+4

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      b57f6df5f53d41a608eb123975a4ff62e3ca1aeb0f95c28441ff1bf0d823d138

    • Size

      600KB

    • MD5

      8bdbb89ca7fd6065b499d8dcbe4519dc

    • SHA1

      2e3bdb38f57326daf80f77500a44ade87f47b94e

    • SHA256

      b57f6df5f53d41a608eb123975a4ff62e3ca1aeb0f95c28441ff1bf0d823d138

    • SHA512

      3ad66682ffc9bc6a8b63cb614104c18bdce838630244da8eead0ce4f2928c415912638f3c57e75135d5efd2f92fa88071fff06faa15cb845d4a2ce75da06cda2

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFdPA7G:Mj2v1crE/h7SGFdPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks