General
-
Target
d150af36f2f3491f0c5f494a955cbd3a_JaffaCakes118
-
Size
2.0MB
-
Sample
240907-hjlzfazhjg
-
MD5
d150af36f2f3491f0c5f494a955cbd3a
-
SHA1
985e5116c2236240339502e3473e5dc7a1345b30
-
SHA256
adb4772d8d5f9ede7d8b52b1beb66db50b616e97d30231290240dbd9cda75b3e
-
SHA512
33e14c7fd573853341eaaa5c222e441c21d21ad925d031ed7dd1db7fa25eb30af5995797c3f016dee28f99b15adb84c542cb0e7485be7d17a51afc65694bd101
-
SSDEEP
49152:if9Q234inibHWwqq8tRcFcQXoXxxqO9zt1f5f0O:q9Q234bbe1yO
Static task
static1
Behavioral task
behavioral1
Sample
d150af36f2f3491f0c5f494a955cbd3a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d150af36f2f3491f0c5f494a955cbd3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
raccoon
d0d8f0c05443081efeb9aa7979b1b9207fcc6052
-
url4cnc
https://drive.google.com/uc?export=download&id=1EBSoPDLupsO6YQpzXcIO7q-Fk8VXBPgi
Targets
-
-
Target
d150af36f2f3491f0c5f494a955cbd3a_JaffaCakes118
-
Size
2.0MB
-
MD5
d150af36f2f3491f0c5f494a955cbd3a
-
SHA1
985e5116c2236240339502e3473e5dc7a1345b30
-
SHA256
adb4772d8d5f9ede7d8b52b1beb66db50b616e97d30231290240dbd9cda75b3e
-
SHA512
33e14c7fd573853341eaaa5c222e441c21d21ad925d031ed7dd1db7fa25eb30af5995797c3f016dee28f99b15adb84c542cb0e7485be7d17a51afc65694bd101
-
SSDEEP
49152:if9Q234inibHWwqq8tRcFcQXoXxxqO9zt1f5f0O:q9Q234bbe1yO
-
Raccoon Stealer V1 payload
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-