General
-
Target
JaffaCakes118_4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378
-
Size
733.0MB
-
Sample
241229-3j7alazqfq
-
MD5
9626aa0997deeb8f37dc963cefa99966
-
SHA1
57577d29daf6c7c38955f3509faa3294b1e5e3dd
-
SHA256
4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378
-
SHA512
290d890daae88639b0b6bcdd2736da7dee7518bae7d9780428018040fea073a8e1e631bec4c29fa821e42376dd3ea7450d2eaba75c9da622168057ffb6affadb
-
SSDEEP
393216:Qhl33epLQlYb9lFsB2ONG95eb2gQ5UoBs2szwP2h:SflwFsB3NG98b2l3B4k+h
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
raccoon
42cf565e21ba7a688adcec7f3f8566f3
http://94.142.138.108:80/
-
user_agent
DuckTales
Targets
-
-
Target
JaffaCakes118_4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378
-
Size
733.0MB
-
MD5
9626aa0997deeb8f37dc963cefa99966
-
SHA1
57577d29daf6c7c38955f3509faa3294b1e5e3dd
-
SHA256
4b0e22d3cab131a181fc028fbd01fd5a6b8421bf1f3d8bed37d8e16fbdc12378
-
SHA512
290d890daae88639b0b6bcdd2736da7dee7518bae7d9780428018040fea073a8e1e631bec4c29fa821e42376dd3ea7450d2eaba75c9da622168057ffb6affadb
-
SSDEEP
393216:Qhl33epLQlYb9lFsB2ONG95eb2gQ5UoBs2szwP2h:SflwFsB3NG98b2l3B4k+h
-
Raccoon Stealer V2 payload
-
Raccoon family
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-