Overview

overview

10

Static

static

3

8b0e04ff4f...2e.exe

windows7-x64

10

8b0e04ff4f...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e419c8eeaf7681f014deace49dff43934e2d73f8615a8da7a360adbcafc8a150

  • Size

    317KB

  • Sample

    241227-aw7gxawpat

  • MD5

    784f99fd5e86c2b8c13f66806686a8fe

  • SHA1

    dd2e037b9c0cf5368cd1c5d47d0459c992a8bd72

  • SHA256

    e419c8eeaf7681f014deace49dff43934e2d73f8615a8da7a360adbcafc8a150

  • SHA512

    f77f870208c9a929ed7ec9a918da78b6c2ad6219f4fa9973a211d95507826f15c9b5f7c2ec849b340a0be08328c69419094dbb8926694eead6b3ff3fa13f4c68

  • SSDEEP

    6144:7Ong99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmvWAubaDEM8:ang99iwx4OnBvR12gI4B9ijKuaDe

Score
10/10
raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      8b0e04ff4f85749464c543e11e78503436f6632f8c9fa4b0c0969555fdcd902e

    • Size

      600KB

    • MD5

      67971450d2c0cacdf5693ae7982712e8

    • SHA1

      b2200716c9131dc83aec2691e7b12756350fd7cb

    • SHA256

      8b0e04ff4f85749464c543e11e78503436f6632f8c9fa4b0c0969555fdcd902e

    • SHA512

      2146f3f8e30278e49abd7bef6c11b2f8396e8cae20a22dbc7965426be10e6c7c5ac7543c7ecf627b84aaa0bf61f4ab7d87e4e9fc41b06585e0818c24f7a771db

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFlPA7G:Mj2v1crE/h7SGFlPA7

    Score
    10/10
    raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks