General

  • Target

    JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79

  • Size

    7.6MB

  • Sample

    241230-dlntlawmgn

  • MD5

    8b2df4d709a6dfc41208b889d2a2fb20

  • SHA1

    2046dad6877b3e766bec7010cdf5c9d5afee0e2b

  • SHA256

    b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79

  • SHA512

    ed0b2a7bb56b73ec46011787a0963378b665e29c44565930ac5e533e46735e3877e0cabc443ba24367dacb5de34fd3e2758072afbfd3fadc7e3bbd6ebe5e2497

  • SSDEEP

    196608:PK8O9TbeJsABbRBsJEvrT8Wza9x5fE1XZLEcHPXgJ/:PK9ejBJij5s1pI/

Malware Config

Extracted

Family

raccoon

Botnet

7cc7e20e8fb40a79ad7a928b913d97ac

C2

http://193.43.146.213/

http://45.142.213.24/

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79

    • Size

      7.6MB

    • MD5

      8b2df4d709a6dfc41208b889d2a2fb20

    • SHA1

      2046dad6877b3e766bec7010cdf5c9d5afee0e2b

    • SHA256

      b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79

    • SHA512

      ed0b2a7bb56b73ec46011787a0963378b665e29c44565930ac5e533e46735e3877e0cabc443ba24367dacb5de34fd3e2758072afbfd3fadc7e3bbd6ebe5e2497

    • SSDEEP

      196608:PK8O9TbeJsABbRBsJEvrT8Wza9x5fE1XZLEcHPXgJ/:PK9ejBJij5s1pI/

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks