General

  • Target

    JaffaCakes118_2303422cfd92ecbe065fd81e2c5aeed6b593dec5f656e1f8874ff45d51159129

  • Size

    726.1MB

  • Sample

    241225-w46fgasmhl

  • MD5

    e580f38a938645eb0dbb4d43ec95424e

  • SHA1

    78f97da2dddd86ebd1d1ccb3903afaca802bf991

  • SHA256

    2303422cfd92ecbe065fd81e2c5aeed6b593dec5f656e1f8874ff45d51159129

  • SHA512

    280df5712f731a2a4ca65151cce4c88a556e4338dee07a45a61cad7bc04f678e524adadefe8407d3aba2a70ff92705205769fc1cf79c662103fe1ef0fcc522f7

  • SSDEEP

    196608:BaUEEJboOWCr9fARjy8LWXShRFh9TSsqT2qXYyKo:EUEExoOWCr9Y3hfDqKqKo

Malware Config

Extracted

Family

raccoon

Botnet

a4e43a9be1ceda1bbe132b4222e215bb

C2

http://51.195.166.180/

Attributes
  • user_agent

    x

xor.plain

Targets

    • Target

      JaffaCakes118_2303422cfd92ecbe065fd81e2c5aeed6b593dec5f656e1f8874ff45d51159129

    • Size

      726.1MB

    • MD5

      e580f38a938645eb0dbb4d43ec95424e

    • SHA1

      78f97da2dddd86ebd1d1ccb3903afaca802bf991

    • SHA256

      2303422cfd92ecbe065fd81e2c5aeed6b593dec5f656e1f8874ff45d51159129

    • SHA512

      280df5712f731a2a4ca65151cce4c88a556e4338dee07a45a61cad7bc04f678e524adadefe8407d3aba2a70ff92705205769fc1cf79c662103fe1ef0fcc522f7

    • SSDEEP

      196608:BaUEEJboOWCr9fARjy8LWXShRFh9TSsqT2qXYyKo:EUEExoOWCr9Y3hfDqKqKo

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks