General

  • Target

    JaffaCakes118_551e4b3499197ee113af71bf036b9e6a80707b62f1ef37ce7c5530a56ba5bd0a

  • Size

    680KB

  • Sample

    241227-b1dwtsyjek

  • MD5

    e0a8c4896f9d0ff67f754040109bca2f

  • SHA1

    f43f40d85d97e8999c1f80f059e98c0a10cf4806

  • SHA256

    551e4b3499197ee113af71bf036b9e6a80707b62f1ef37ce7c5530a56ba5bd0a

  • SHA512

    a9f973215c43c3dc002f633c2ef2784c5a0dc6f399d09b548a094d85f8eacdba79d004077766c3a02cf008402df7af09a60457d47222550c5655bd6c230b0d4f

  • SSDEEP

    12288:sdeRen3/xd0UGAFzwn52welvWRVOWUjecnkXd6AyWDmGcOs:sdfvFGAyn5Gecn/Ars

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      06b26f9043d5590a4b9494d41c9832dd226fba7712e2e875a59c86c33fb5126a

    • Size

      1.4MB

    • MD5

      9e657e1c872becfbd8f29eff9c2c96ad

    • SHA1

      e3cbb74399fefa8278ae2111cc31ab8c3bdd9efd

    • SHA256

      06b26f9043d5590a4b9494d41c9832dd226fba7712e2e875a59c86c33fb5126a

    • SHA512

      988ae085746053daf3554c394703d910c5bbcf86b04fc9365fa26f98529b19f57482039aeed78db8554e499d5e9127fb4e75aac1cde9a6b429d0b696619b5a52

    • SSDEEP

      24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFve6:rWB7rFDp1cFm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks