General

  • Target

    JaffaCakes118_15979ec58dd08777d9360ceb1fd92213aafc1a297c85a1a5521f6d296bd2eeb5

  • Size

    730.2MB

  • Sample

    241230-ekltaaxncr

  • MD5

    f7149bc8671dca2d1d9233dd1e93ed44

  • SHA1

    7b35f1b7fdc520145d78ea54a68b274bdb8839c4

  • SHA256

    15979ec58dd08777d9360ceb1fd92213aafc1a297c85a1a5521f6d296bd2eeb5

  • SHA512

    4016682014f7863eeb32ac571aeeaf6313b5372cc21367ba70b2b7a3bc2e329aeee80796873e8d93e5d54eb03ebe04e54d7057dff9f3a67c4eb76e8f45f84b0c

  • SSDEEP

    196608:nNjXgrvo5xsSYBmIOhdxfCxs5sFRXTQojht33KL7GYf0hgIcqmi/SWxM21r8:teoYLOxfC65YRjzht36+VgM6Wxg

Malware Config

Extracted

Family

raccoon

Botnet

9acc0b4b109f517573794147c09af4c8

C2

http://94.142.138.191/

http://78.153.130.157/

http://79.137.203.5/

Attributes
  • user_agent

    901785252112

xor.plain

Targets

    • Target

      JaffaCakes118_15979ec58dd08777d9360ceb1fd92213aafc1a297c85a1a5521f6d296bd2eeb5

    • Size

      730.2MB

    • MD5

      f7149bc8671dca2d1d9233dd1e93ed44

    • SHA1

      7b35f1b7fdc520145d78ea54a68b274bdb8839c4

    • SHA256

      15979ec58dd08777d9360ceb1fd92213aafc1a297c85a1a5521f6d296bd2eeb5

    • SHA512

      4016682014f7863eeb32ac571aeeaf6313b5372cc21367ba70b2b7a3bc2e329aeee80796873e8d93e5d54eb03ebe04e54d7057dff9f3a67c4eb76e8f45f84b0c

    • SSDEEP

      196608:nNjXgrvo5xsSYBmIOhdxfCxs5sFRXTQojht33KL7GYf0hgIcqmi/SWxM21r8:teoYLOxfC65YRjzht36+VgM6Wxg

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks