General

  • Target

    JaffaCakes118_d9176e1ca8a2dd8e8310d79247d9d10a986d329c05564abb0afc5b5d6a3a6d5b

  • Size

    495KB

  • Sample

    241230-fs7amayqej

  • MD5

    4d0493fb687c9963b0bc8bc771496732

  • SHA1

    b6325d2a838a257aa5808208ff11a4a1a6b5d87b

  • SHA256

    d9176e1ca8a2dd8e8310d79247d9d10a986d329c05564abb0afc5b5d6a3a6d5b

  • SHA512

    0b4ca9761f5039dcf6876ea08de54768cf8185c0926174dca551b6856353dec715d6cd1672a3a8a4a803db6167042b6b76ca1f9e3f31954155abaf62c2adb887

  • SSDEEP

    12288:1nJR+6Wl96YkVmjqDB8/IoWT2DQ64yhddQ:x8l96tmjqDByo2c64YnQ

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      030aed84089317c128435998ccebc3fb999d0384066902c1c57cf1a427e7ac2b

    • Size

      1.1MB

    • MD5

      491ad5b3da7c8fce78998b9e1117c936

    • SHA1

      16b46b06daa987fb34e1d1ec7b136c5e6a54d0cf

    • SHA256

      030aed84089317c128435998ccebc3fb999d0384066902c1c57cf1a427e7ac2b

    • SHA512

      a024a1f8804503958905d21846a8d6473c59d444d7e7705f144db601936efbca2f393bcbe84820dbcafc9eec91532125d708791f22d62e235f3f0cf85e74cee7

    • SSDEEP

      24576:NrGC4D73azrTzWBB1M2SgbJKRPwZ9f3EYU:pAnsq67XY

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks