General

  • Target

    JaffaCakes118_e4505be637dd0744694455c2efd5241b35e78fbd6ba643f96f93c6885146dc0b

  • Size

    317KB

  • Sample

    241229-cdl5csymgw

  • MD5

    7884b8fe70c688c08fa22589cc97f155

  • SHA1

    84d4b84762afb2fb247d14e7c1ef02d34f5d764c

  • SHA256

    e4505be637dd0744694455c2efd5241b35e78fbd6ba643f96f93c6885146dc0b

  • SHA512

    f69a1fb9089fa824624dc674290135f1e3f256ff69037506cb3f99b2fde4b2ce1c87a480a1283a49f7ca96ff24ebfd45b3dccfdccc6b56b34d8b000913f59e2e

  • SSDEEP

    6144:8Ong99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmviZ4iNsiGVQS:hng99iwx4OnBvR12gI4B9ijKiZjWio

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      407038f5ba733f84d65fad716048bf777bb3d9ae846999a94c6e9fb3d5627312

    • Size

      600KB

    • MD5

      f8ccb1d331b2590e286b1462c6c01d5b

    • SHA1

      ed4ae021129f46e6860d2bd502dae792c3a1202d

    • SHA256

      407038f5ba733f84d65fad716048bf777bb3d9ae846999a94c6e9fb3d5627312

    • SHA512

      8d8c54ade70aed55ac4aacce5ad99a3708de0f612755d6bf908c4e0753951f0ea0128df03297ce0143f541de70362c8af349a2532634931f0d3412df34f44e23

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFNPA7G:Mj2v1crE/h7SGFNPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks