General

  • Target

    JaffaCakes118_4027484c7935b969f120871ac655986b951d826358d83228037f80fe4a70b6b6

  • Size

    394KB

  • Sample

    241229-3sqdfa1kaq

  • MD5

    e63629437abfb8feed71e6f232c13747

  • SHA1

    3f1ba0a07c2e26fe07a57ec2f91cd34571f6b73f

  • SHA256

    4027484c7935b969f120871ac655986b951d826358d83228037f80fe4a70b6b6

  • SHA512

    38e69a86ae2ba7a82bb9a0fc3f533bee5f8121a2f3e9685e0080c7cec28a00cc4d95498b86b154a41f04968dfaf86337766e74d8535342a1e792b18a83748326

  • SSDEEP

    6144:QeBDwAjEAG1GfI/V1q8UWgZzrhEK0ZjjWO1rcU3xm7b7HLov2AC4CJKy0NmN0:d/AR1GQxcXWjprP3xm7no2ACJJs

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      56c7335c568a988803c82b1e8d90babc9157fcf812b87eeeb4ecc1a5ca9a8f30

    • Size

      755KB

    • MD5

      48b86cd310cd3975d1f681c31b464ce6

    • SHA1

      b45d8e31f63653c166475dabe0202be0e288df99

    • SHA256

      56c7335c568a988803c82b1e8d90babc9157fcf812b87eeeb4ecc1a5ca9a8f30

    • SHA512

      c9370923a846fb00400f94a91c79567548e119ba12046811b35725a9fb9e5ef197a6720d25b8cc93301d4a812763aba6bdeb4d7ed766c794e52331ca62fa54f0

    • SSDEEP

      12288:yeEi/ncDf0RRXvU8o03rT8J36hWIOfyec/N8h98G0yZ5+eSyAxdRZPA7F7W:civcAzFo0S3v6ZI5+3xlPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks