General

  • Target

    JaffaCakes118_badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa

  • Size

    727.2MB

  • Sample

    241230-yh9l4sylaz

  • MD5

    3f2771d50d1b137519fe3ece78e812d8

  • SHA1

    8c7ed56006620cd81f76c4cf9db16b895b7a6c46

  • SHA256

    badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa

  • SHA512

    2cfe3edd52ae342bfeecac4c49193d8f3969e18adfe847f887910256e776ded073980463012139e7b2cc199e877efa967335633f9557c20d7333a06245a879e9

  • SSDEEP

    196608:gIAd/GCkjWwZ4k8hbhijp4c5xkTWFhTZXT7DMsfh9N4:gI2/GHW13hEjp40xt1ZHgC9a

Malware Config

Extracted

Family

raccoon

Botnet

fdcd5174bda4142901af2b88c81d23a3

C2

http://193.43.147.135/

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      JaffaCakes118_badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa

    • Size

      727.2MB

    • MD5

      3f2771d50d1b137519fe3ece78e812d8

    • SHA1

      8c7ed56006620cd81f76c4cf9db16b895b7a6c46

    • SHA256

      badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa

    • SHA512

      2cfe3edd52ae342bfeecac4c49193d8f3969e18adfe847f887910256e776ded073980463012139e7b2cc199e877efa967335633f9557c20d7333a06245a879e9

    • SSDEEP

      196608:gIAd/GCkjWwZ4k8hbhijp4c5xkTWFhTZXT7DMsfh9N4:gI2/GHW13hEjp40xt1ZHgC9a

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks