General
-
Target
JaffaCakes118_83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2
-
Size
800.0MB
-
Sample
241225-h3x6ta1lgl
-
MD5
82f06702426018eddc9c6da2dc246c84
-
SHA1
b513c6b4e2d51f8696ca3598a355dc9ff817614b
-
SHA256
83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2
-
SHA512
b56ab2360da0e391187cae11abfadc2750fee5ed84d7bf3be614e58f9e04b179a1f29745b9d5d4c0facdd353bca1335d30ec7b8d0abbfbbbc779e3bb7c560acb
-
SSDEEP
3072:VjbyIdPQ+IVllRy0rLf8kGwkIoCtpstpmaCY6Sh2wAKZPIzFMv/Inwxd:VjbyGIJlFrFkUtpstomow5QJM4nM
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
raccoon
8fb7b851641d456f39570978e99f780e
http://45.15.156.239/
-
user_agent
901785252112
Targets
-
-
Target
JaffaCakes118_83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2
-
Size
800.0MB
-
MD5
82f06702426018eddc9c6da2dc246c84
-
SHA1
b513c6b4e2d51f8696ca3598a355dc9ff817614b
-
SHA256
83dbed249f410d8d7e95226105af7ac5065b33e208434a6cc7db437369d354b2
-
SHA512
b56ab2360da0e391187cae11abfadc2750fee5ed84d7bf3be614e58f9e04b179a1f29745b9d5d4c0facdd353bca1335d30ec7b8d0abbfbbbc779e3bb7c560acb
-
SSDEEP
3072:VjbyIdPQ+IVllRy0rLf8kGwkIoCtpstpmaCY6Sh2wAKZPIzFMv/Inwxd:VjbyGIJlFrFkUtpstomow5QJM4nM
-
Raccoon Stealer V2 payload
-
Raccoon family
-
Suspicious use of SetThreadContext
-