Analysis
-
max time kernel
142s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-03-2024 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0aeb3be326df43129cfb31d10aea8c10_JaffaCakes118.exe
Resource
win7-20240220-en
2 signatures
150 seconds
General
-
Target
0aeb3be326df43129cfb31d10aea8c10_JaffaCakes118.exe
-
Size
512KB
-
MD5
0aeb3be326df43129cfb31d10aea8c10
-
SHA1
7442e98726a1d5d9133f3172588b16d793158e8e
-
SHA256
fbe7eee5f2cc32b619fd3620ab5000a77786e59c29b2c635b4cc4b82e8c7c9b5
-
SHA512
cbc53a813c3e1fc6849c7ce176cd3e7d78b6e2f52fa94ff1f7aa6457e220111ebddf96dcaa1a466bae4e0a2af3b7b31a1f6bd988ffb5acef1e4fefc07035136f
-
SSDEEP
12288:KnAvbugs1YN5OuIg10tiFQO/WZScKAtgzHDd3xg0QiuB76sel:NvbDVIFYzWwAkh35o7
Malware Config
Signatures
-
Raccoon Stealer V1 payload 5 IoCs
resource yara_rule behavioral2/memory/1108-2-0x0000000002520000-0x00000000025AE000-memory.dmp family_raccoon_v1 behavioral2/memory/1108-3-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1 behavioral2/memory/1108-4-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1 behavioral2/memory/1108-7-0x0000000002520000-0x00000000025AE000-memory.dmp family_raccoon_v1 behavioral2/memory/1108-10-0x0000000000400000-0x00000000007B2000-memory.dmp family_raccoon_v1