General

  • Target

    JaffaCakes118_4e437636c9113fc73c86b22422c91c35cd11def1e1a8c28a3f2c596166c15bc3

  • Size

    726.5MB

  • Sample

    241226-ta8ydszkhn

  • MD5

    930faa4f76f94b1e0fe712eef3a25105

  • SHA1

    dc1e0bb6380d51c4f3634d8693f664517c8c80b3

  • SHA256

    4e437636c9113fc73c86b22422c91c35cd11def1e1a8c28a3f2c596166c15bc3

  • SHA512

    048f215f0bc041d0e1be070f98cd2bfc76a716a7556cc5760faf25154d0af1e10470ae2fef53e91e6a19b822153efe434f93180a8799a9868239fbf4819b4ea2

  • SSDEEP

    196608:U3hC9zyNqkQPFwCEYZeDcUq2DqsMG/LgegNIwrM:r9zUq/PTEYkzqNgLgegy7

Malware Config

Extracted

Family

raccoon

Botnet

717609e6131226f92ce8ce08c34305be

C2

http://83.217.11.35

http://83.217.11.34

Attributes
  • user_agent

    901785252112

xor.plain

Targets

    • Target

      JaffaCakes118_4e437636c9113fc73c86b22422c91c35cd11def1e1a8c28a3f2c596166c15bc3

    • Size

      726.5MB

    • MD5

      930faa4f76f94b1e0fe712eef3a25105

    • SHA1

      dc1e0bb6380d51c4f3634d8693f664517c8c80b3

    • SHA256

      4e437636c9113fc73c86b22422c91c35cd11def1e1a8c28a3f2c596166c15bc3

    • SHA512

      048f215f0bc041d0e1be070f98cd2bfc76a716a7556cc5760faf25154d0af1e10470ae2fef53e91e6a19b822153efe434f93180a8799a9868239fbf4819b4ea2

    • SSDEEP

      196608:U3hC9zyNqkQPFwCEYZeDcUq2DqsMG/LgegNIwrM:r9zUq/PTEYkzqNgLgegy7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks