Extracted

• • Target

    e4f4e051625054d753730fd9183c4a34_JaffaCakes118

  • Size

    496KB

  • MD5

    e4f4e051625054d753730fd9183c4a34

  • SHA1

    d538ffffd82540752a23d5defc90e501093861bf

  • SHA256

    43eb644d0682f9bc85745c538015ba9ad19b10116792b5e5aa5da33b6c3af797

  • SHA512

    10178975c49c2fc1c414ad1d106d1e46c0fa4bd1748bba24c80b7ff982da034019d69bba3b559255632a8df953dab7ec901b979d8be99ee88efefb3cbd9861a5

  • SSDEEP

    12288:sP8pIWvupcsqm9vINO0z00n30h2tckiUSJdPKF0:sLWIc3mxINH40n30M25dPj

  Score

  10^/10

  raccoonff236091d9fbac249beeec4137efd72b5327efd9discoverystealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer V1 payload

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2