Analysis

  • max time kernel
    141s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 21:24

General

  • Target

    2d33140725e1514186c3ac90f66d99af_JaffaCakes118.exe

  • Size

    582KB

  • MD5

    2d33140725e1514186c3ac90f66d99af

  • SHA1

    28a7ef68da4a09bbb44b1d0091927a3fe03391fc

  • SHA256

    ad29facf51efa772eb0f93239a7e2cfcc56f67846871ede690dc49a2ff6cb5de

  • SHA512

    8b6eb0e9af6ac5961102ecff5c0d4ea67b5ad3715112bb0c85aece142a1de6f0d89f785e7924659585c1da5c1ea7c4e0b5d782de7655d0b22250f8ed48f572d0

  • SSDEEP

    12288:uTyptX4By3jD/zEKxCdz0ay5yTY/KLvE60Dri/sMwogWSjk:uESBy3vz+0RcY/yEusMwo

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d33140725e1514186c3ac90f66d99af_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2d33140725e1514186c3ac90f66d99af_JaffaCakes118.exe"
    1⤵
      PID:2352

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2352-2-0x0000000000A40000-0x0000000000ACE000-memory.dmp

      Filesize

      568KB

    • memory/2352-1-0x0000000000C30000-0x0000000000D30000-memory.dmp

      Filesize

      1024KB

    • memory/2352-3-0x0000000000400000-0x00000000007C3000-memory.dmp

      Filesize

      3.8MB

    • memory/2352-4-0x0000000000400000-0x00000000007C3000-memory.dmp

      Filesize

      3.8MB

    • memory/2352-6-0x0000000000C30000-0x0000000000D30000-memory.dmp

      Filesize

      1024KB

    • memory/2352-7-0x0000000000A40000-0x0000000000ACE000-memory.dmp

      Filesize

      568KB

    • memory/2352-16-0x0000000000400000-0x00000000007C3000-memory.dmp

      Filesize

      3.8MB