Overview

overview

10

Static

static

3

d0415a982b...2e.exe

windows7-x64

10

d0415a982b...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

  • Size

    317KB

  • Sample

    241229-e3spjssne1

  • MD5

    f1b68baa001140f5b3b8de259d0b5fa3

  • SHA1

    6d3e711d41075a7b823f1b7021fc56493208f93d

  • SHA256

    3bb1c3ebbe82f284b9a321adbc3f6cc2f79b2e097a4a47316b788b4857c2acdc

  • SHA512

    c3e8fb3c365e3b393ee0ef021c03b16fdb216f26d5caa22feb5d3ebb9b8691ea6587391e28d7a305cc188b3563f5b3f0097ab2e5cb0c3879f856b96df8118a3c

  • SSDEEP

    6144:lOng99RsJXPwxgTsqDyODlWJn+6vjbR+yCzBIBID7ontvj9ijmvIZ4iNsiGVQ5:0ng99iwx4OnBvR12gI4B9ijKIZjWi/

Score
10/10
raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

    • Size

      600KB

    • MD5

      f744fbf5d93fc269a75f9a84a079aea9

    • SHA1

      a8094d90ca9cf4b1382938536a195917a56aa8b0

    • SHA256

      d0415a982b597f7d0e88754646beb52353338d362cb476b341aba50dd7115e2e

    • SHA512

      e00cff33c9236de0176ad6b6f5a3024d4611cd4dc8d9ea697af5bf3c3cb90bb7d2775ef6baa14c29f5e123867b9e63e3d0135c075468e261cd9d0b17648d34cd

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFNPA7G:Mj2v1crE/h7SGFNPA7

    Score
    10/10
    raccoonafb5c633c4650f69312baef49db9dfa4discoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks