General

  • Target

    JaffaCakes118_f9b727df01718fda1e8d9adaa57fb529ed3008f0e3bec2f05e81451850c89121

  • Size

    1.4MB

  • Sample

    241230-z8wnlsyrfj

  • MD5

    a52084a269c89eeec6febd896c8729f2

  • SHA1

    fd00884645dc2b39774127bfb0263309e165ebe4

  • SHA256

    f9b727df01718fda1e8d9adaa57fb529ed3008f0e3bec2f05e81451850c89121

  • SHA512

    db00d26e061543f8f373717fb42fde547a2a23e03798085255c60c797c77086e0ccc4094cfd65d0e467bfc7a8d527669a8e7d6e240b2daf7929b401eb63a46ad

  • SSDEEP

    24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFveC:rWB7rFDp1cFm

Malware Config

Extracted

Family

raccoon

Botnet

afb5c633c4650f69312baef49db9dfa4

C2

http://77.73.132.84

Attributes
  • user_agent

    mozzzzzzzzzzz

rc4.plain

Targets

    • Target

      JaffaCakes118_f9b727df01718fda1e8d9adaa57fb529ed3008f0e3bec2f05e81451850c89121

    • Size

      1.4MB

    • MD5

      a52084a269c89eeec6febd896c8729f2

    • SHA1

      fd00884645dc2b39774127bfb0263309e165ebe4

    • SHA256

      f9b727df01718fda1e8d9adaa57fb529ed3008f0e3bec2f05e81451850c89121

    • SHA512

      db00d26e061543f8f373717fb42fde547a2a23e03798085255c60c797c77086e0ccc4094cfd65d0e467bfc7a8d527669a8e7d6e240b2daf7929b401eb63a46ad

    • SSDEEP

      24576:rk8gmqh7swb4tnsvkZYVFVVWYgbUf8vaz+WOucFveC:rWB7rFDp1cFm

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V2 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks