General
- Target be01323b80fba9b067b964f32fb09b79_JaffaCakes118
- Size 541KB
- Sample241130-qfbnasyper
- SHA256 1e89e268686b120ae6e58ebfc87c5a532d227a54c35bc3b01ed1b992503f64e2
- MD5 be01323b80fba9b067b964f32fb09b79
- SHA1 3cab41e92e0c6b2cc63e53f7e55b22db566d000a
- SHA512 73fa1a25fa7fccaa874d0f5e450870d93e1710991057e3af423b6b7089f30b046959e7f6f85a0e2c53b6d936b91141b4b33dcbaa676b9489e98c6bdd8d0df871
- SSDEEP 12288:HoHoQ2Akjmwt0+jFHCQ3cnXJ9sMuzxp6L:HOoI2mwt0+jd2nsL36L
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
be01323b80fba9b067b964f32fb09b79_JaffaCakes118.exe
Resource
win7-20241010-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
be01323b80fba9b067b964f32fb09b79_JaffaCakes118.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
raccoon
Version
-
1.8.2
Botnet
-
e672747afc67feb221ca60f8fc9e03adcf10f038
Attributes
-
url4cnc
http://teletop.top/youyouhell0world
http://teleta.top/youyouhell0world
https://t.me/youyouhell0world
rc4.plain
rc4.plain
Targets
-
- Target be01323b80fba9b067b964f32fb09b79_JaffaCakes118
- Size 541KB
- SHA256 1e89e268686b120ae6e58ebfc87c5a532d227a54c35bc3b01ed1b992503f64e2
- MD5 be01323b80fba9b067b964f32fb09b79
- SHA1 3cab41e92e0c6b2cc63e53f7e55b22db566d000a
- SHA512 73fa1a25fa7fccaa874d0f5e450870d93e1710991057e3af423b6b7089f30b046959e7f6f85a0e2c53b6d936b91141b4b33dcbaa676b9489e98c6bdd8d0df871
- SSDEEP 12288:HoHoQ2Akjmwt0+jFHCQ3cnXJ9sMuzxp6L:HOoI2mwt0+jd2nsL36L
- MD5 SHA1 SHA512 SSDEEP
-
Raccoon Stealer V1 payload
-
Raccoon family