Analysis

  • max time kernel
    142s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 19:15

General

  • Target

    0dcf4be366bb277d4d3ec359d44a21ef_JaffaCakes118.exe

  • Size

    545KB

  • MD5

    0dcf4be366bb277d4d3ec359d44a21ef

  • SHA1

    44965835117bcef1633349406e3ecdef0ab3ea9b

  • SHA256

    246f92c9a2810b0a3e5a982c09b3b3be20b44fdc9a068f4d5e00bc7f82268d71

  • SHA512

    47bf77e9106d80fb73fc00062027c0ac1ec1bf5a50d53794cbd951736f85881f258202b3b2ca5fc11b63ef62fd31c1379b3f46fecd1e144a824e71d22133b4f6

  • SSDEEP

    12288:+AWY9r00N16acH7pKyTPDNTMaS/uuLZGXL8Rzmsd:+ABB16aFyTbNINmXA

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0dcf4be366bb277d4d3ec359d44a21ef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0dcf4be366bb277d4d3ec359d44a21ef_JaffaCakes118.exe"
    1⤵
      PID:1644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1644-2-0x0000000000280000-0x000000000030E000-memory.dmp

      Filesize

      568KB

    • memory/1644-1-0x0000000001B40000-0x0000000001C40000-memory.dmp

      Filesize

      1024KB

    • memory/1644-3-0x0000000000400000-0x00000000016FB000-memory.dmp

      Filesize

      19.0MB

    • memory/1644-6-0x0000000001B40000-0x0000000001C40000-memory.dmp

      Filesize

      1024KB

    • memory/1644-7-0x0000000000280000-0x000000000030E000-memory.dmp

      Filesize

      568KB

    • memory/1644-16-0x0000000000400000-0x00000000016FB000-memory.dmp

      Filesize

      19.0MB