General

  • Target

    JaffaCakes118_2e2565b1164ad2f437bfe81b994d5bbdd5a0af69794322cc6bf831a81f48f2a5

  • Size

    755KB

  • Sample

    241228-3jr6nsvrdm

  • MD5

    e1de3ef7941109a8a87843186a5e1a1f

  • SHA1

    fae7cff4d3cfcb22b7503bc2b3ef8ef36adae56c

  • SHA256

    2e2565b1164ad2f437bfe81b994d5bbdd5a0af69794322cc6bf831a81f48f2a5

  • SHA512

    e108b73c4db6ca9e1b917e66f1dff714e7a61bf3e8346b8f53baf070fb42ce42eaea61636261e9f1797a177f4a77408a8f067f8423bec93b0ceefa173b376d47

  • SSDEEP

    12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdRtPA7F7W:civcAzFo0S3v6ZI5+3xZPA7

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_2e2565b1164ad2f437bfe81b994d5bbdd5a0af69794322cc6bf831a81f48f2a5

    • Size

      755KB

    • MD5

      e1de3ef7941109a8a87843186a5e1a1f

    • SHA1

      fae7cff4d3cfcb22b7503bc2b3ef8ef36adae56c

    • SHA256

      2e2565b1164ad2f437bfe81b994d5bbdd5a0af69794322cc6bf831a81f48f2a5

    • SHA512

      e108b73c4db6ca9e1b917e66f1dff714e7a61bf3e8346b8f53baf070fb42ce42eaea61636261e9f1797a177f4a77408a8f067f8423bec93b0ceefa173b376d47

    • SSDEEP

      12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdRtPA7F7W:civcAzFo0S3v6ZI5+3xZPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks