General

  • Target

    JaffaCakes118_2d3caccb99fe8cb5c5b48b65755293a9a66902ab1fe0733f14f3819c8b0b1eaf

  • Size

    732.3MB

  • Sample

    241226-272jksvjbz

  • MD5

    8f6aa94a0b85cf79da52efdead5fb4ce

  • SHA1

    8710b958f8100800d0e20b6fbb2a923eaf873fbd

  • SHA256

    2d3caccb99fe8cb5c5b48b65755293a9a66902ab1fe0733f14f3819c8b0b1eaf

  • SHA512

    62a29f14c2ec89a37d83b93e9a4d50bb48a6e40796f166e80b21440bc82ec9df40254de0b70b7203d6d38591a434a475810a044c9314a22a563403a880983c7f

  • SSDEEP

    393216:sEq0JDFFrbhpRytYlneukiipq+s16ykXBxWdRFIf:R3rbfQtYneliibspkXBsdRm

Malware Config

Extracted

Family

raccoon

Botnet

1edc1d488517ae00069ab81fe06ea7e2

C2

http://83.217.11.32/

http://83.217.11.31/

http://83.217.11.13

Attributes
  • user_agent

    B1D3N_RIM_MY_ASS

xor.plain

Targets

    • Target

      JaffaCakes118_2d3caccb99fe8cb5c5b48b65755293a9a66902ab1fe0733f14f3819c8b0b1eaf

    • Size

      732.3MB

    • MD5

      8f6aa94a0b85cf79da52efdead5fb4ce

    • SHA1

      8710b958f8100800d0e20b6fbb2a923eaf873fbd

    • SHA256

      2d3caccb99fe8cb5c5b48b65755293a9a66902ab1fe0733f14f3819c8b0b1eaf

    • SHA512

      62a29f14c2ec89a37d83b93e9a4d50bb48a6e40796f166e80b21440bc82ec9df40254de0b70b7203d6d38591a434a475810a044c9314a22a563403a880983c7f

    • SSDEEP

      393216:sEq0JDFFrbhpRytYlneukiipq+s16ykXBxWdRFIf:R3rbfQtYneliibspkXBsdRm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks