General

  • Target

    JaffaCakes118_fc40fb2cf0033140be1f497065d397f851efb3917b11544b32cfeb6aff86c842

  • Size

    495KB

  • Sample

    241230-apa55a1pfx

  • MD5

    cbd258fab73e6bf7d21576daf71a5274

  • SHA1

    d1c683160706842afbabbdbbf48ba9f4e932929d

  • SHA256

    fc40fb2cf0033140be1f497065d397f851efb3917b11544b32cfeb6aff86c842

  • SHA512

    cced6f6079115e10bcefd3df8102d641e3c9693bd1ab3b5c87b61828d957e6d2de8b0cd11d02af84b4d27f820cc7efed8d6719e788f5c63b601bf221df2709cb

  • SSDEEP

    6144:93OcMFXDR0dqTpAlaCnOhCdmtyhqxuIVjSRBqDx5t8/3TEdoloT2TUDAHEsQ1Q4y:gnJR+6Wl96YkVmjqDB8/IoWT2DQ64yv

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      86ae81655a69e5998b288251131e952448d7e798aed64c91860b87f88eef000c

    • Size

      1.1MB

    • MD5

      71f585dd4e74861b070cfe15aa934071

    • SHA1

      ce4679d3fbcfd25defa4e28f79058e5b5edee26d

    • SHA256

      86ae81655a69e5998b288251131e952448d7e798aed64c91860b87f88eef000c

    • SHA512

      c96c21cfa60e225a3c497a5a5be1dc70d9f54cddd228fa3ca59486426e1de6395d3d29868f6cde0043e24d4e7e12573cec1613f2f68ccac47fd1b7aae1897d04

    • SSDEEP

      24576:NrGC4D73azrTzWBB1M2SgbJKRPwZ9f3EY5:pAnsq67XY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks