General

  • Target

    JaffaCakes118_cac280638b83d28066d19841d9c0b7c5f19d82de6edbc9d479d48ccd7625371b

  • Size

    495KB

  • Sample

    241230-fdb6yaymal

  • MD5

    af183c87e39f356ee5f98c231dbb1f1d

  • SHA1

    1545d335fd722c016d2ba42c62b408f267e2b631

  • SHA256

    cac280638b83d28066d19841d9c0b7c5f19d82de6edbc9d479d48ccd7625371b

  • SHA512

    f89aedb5ac1409772645325d38bf06999ce18c81c956b9190a1fbced7ed1d8552216fb00eb91b31fc395c9f410c1765cb322169c76df9036ccf15e1de982a936

  • SSDEEP

    12288:FnJR+6Wl96YkVmjqDB8/IoWT2DQ64yFddI:B8l96tmjqDByo2c64UnI

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      9d22e4f9c77e90e52ab22842b56557c0d29a5d323e3f50b90e4db4faec551f83

    • Size

      1.1MB

    • MD5

      9618ac3fbda19ff0ed362db9b2ccac64

    • SHA1

      e906eb292e834f3b9b44b1bc096ec41e76417c32

    • SHA256

      9d22e4f9c77e90e52ab22842b56557c0d29a5d323e3f50b90e4db4faec551f83

    • SHA512

      deab9d05e87f7854fa53a5ed0b2290abc607db17a6cbb3ed0fc0147a759ec5f49b369a0da99903cffba6b695811ee62684344864a2b161d6b003cbb39a044f34

    • SSDEEP

      24576:NrGC4D73azrTzWBB1M2SgbJKRPwZ9f3EY0:pAnsq67XY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks