Overview

overview

10

Static

static

3

JaffaCakes...ed.exe

windows7-x64

10

JaffaCakes...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_181d1c2e441102f8bed4c0a50420d0ed

  • Size

    540KB

  • Sample

    241231-nl4vxszrep

  • MD5

    181d1c2e441102f8bed4c0a50420d0ed

  • SHA1

    0146e0cb44fb072c0b7ca88df2edf97c101b078b

  • SHA256

    8387ad32144c17a6ed8f986d4841d1caa85c54b41a0da7961bc199642a62380d

  • SHA512

    64d5e3cbedd6069d3141defb1cc130c8da7ccba70ff9679e20324667a00b764fbccc0aa29e9cd67b103563a5ce1daf89185ffcc0550163d156bc35df95a8fe4e

  • SSDEEP

    12288:kqNtfxD1cPk0SYbfMRamXMOtmcetnBndJugAwZGEX8cA0/M:kKtGPk0SYbEXetnpdJugFsEv

Score
10/10
raccoon206638f4cd9b007905f3516343bb43f7f6b04e5cdiscoverystealer

Malware Config

Extracted

Family

raccoon

Version

1.8.2

Botnet

206638f4cd9b007905f3516343bb43f7f6b04e5c

Attributes
  • url4cnc

    http://telemirror.top/upsdronfly3

    http://tgmirror.top/upsdronfly3

    http://telegatt.top/upsdronfly3

    http://telegka.top/upsdronfly3

    http://telegin.top/upsdronfly3

    https://t.me/upsdronfly3

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_181d1c2e441102f8bed4c0a50420d0ed

    • Size

      540KB

    • MD5

      181d1c2e441102f8bed4c0a50420d0ed

    • SHA1

      0146e0cb44fb072c0b7ca88df2edf97c101b078b

    • SHA256

      8387ad32144c17a6ed8f986d4841d1caa85c54b41a0da7961bc199642a62380d

    • SHA512

      64d5e3cbedd6069d3141defb1cc130c8da7ccba70ff9679e20324667a00b764fbccc0aa29e9cd67b103563a5ce1daf89185ffcc0550163d156bc35df95a8fe4e

    • SSDEEP

      12288:kqNtfxD1cPk0SYbfMRamXMOtmcetnBndJugAwZGEX8cA0/M:kKtGPk0SYbEXetnpdJugFsEv

    Score
    10/10
    raccoon206638f4cd9b007905f3516343bb43f7f6b04e5cdiscoverystealer

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

      stealerraccoon

    • Raccoon Stealer V1 payload

    • Raccoon family

      raccoon
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks