General

  • Target

    JaffaCakes118_f41c94d1f603b791811aa119a535976a52720e0d964fcbff2823d28e649ce44e

  • Size

    600KB

  • Sample

    241230-gflc3azndk

  • MD5

    4375e9ec706c614994ea1bf6939051c0

  • SHA1

    bc9bf400dda4108853594d5833f9c1e7a2e4c5cb

  • SHA256

    f41c94d1f603b791811aa119a535976a52720e0d964fcbff2823d28e649ce44e

  • SHA512

    d9dd5b93af235f8b542beb57627c5639726de0c0de68eba592c9b78cddb71ab08ab43526c4a02e8a11bbb5c9691f934e089a80ae591a127db373d2bba18e465a

  • SSDEEP

    12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFVPA7G:Mj2v1crE/h7SGFVPA7

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://193.56.146.177

Attributes
  • user_agent

    mozzzzzzzzzzz

xor.plain

Targets

    • Target

      JaffaCakes118_f41c94d1f603b791811aa119a535976a52720e0d964fcbff2823d28e649ce44e

    • Size

      600KB

    • MD5

      4375e9ec706c614994ea1bf6939051c0

    • SHA1

      bc9bf400dda4108853594d5833f9c1e7a2e4c5cb

    • SHA256

      f41c94d1f603b791811aa119a535976a52720e0d964fcbff2823d28e649ce44e

    • SHA512

      d9dd5b93af235f8b542beb57627c5639726de0c0de68eba592c9b78cddb71ab08ab43526c4a02e8a11bbb5c9691f934e089a80ae591a127db373d2bba18e465a

    • SSDEEP

      12288:MjiNWSEaZ/ygfMlruZ/ZPv3rS4O/Z3X6tFVPA7G:Mj2v1crE/h7SGFVPA7

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks