Analysis

  • max time kernel
    140s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31-03-2024 07:47

General

  • Target

    50f3588df57df36f71786cb7fd2876fd_JaffaCakes118.exe

  • Size

    561KB

  • MD5

    50f3588df57df36f71786cb7fd2876fd

  • SHA1

    e9008ea9e6da7547fa1d8914d9d2d77cb3977e36

  • SHA256

    4701e82080bbf43bfaf8dee522b66e11ee9029154eca770701e34e3a7822f263

  • SHA512

    6071c0e67a940a31a5be485160b4736f04f919582181ed02e1a5272a52472fcc292f20ab2bd8949eb38186babb7f2491876ce8d67cea706840585c5562ade792

  • SSDEEP

    12288:BcW1HJ+I3MF7H2Jl7XOwIVN5j3vPJxXLT2CQoLm2v0vQGmD:5JpJlAN93vPjn24mhv

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\50f3588df57df36f71786cb7fd2876fd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\50f3588df57df36f71786cb7fd2876fd_JaffaCakes118.exe"
    1⤵
      PID:2216

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2216-1-0x0000000001830000-0x0000000001930000-memory.dmp

      Filesize

      1024KB

    • memory/2216-2-0x0000000000230000-0x00000000002BE000-memory.dmp

      Filesize

      568KB

    • memory/2216-3-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB

    • memory/2216-4-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB

    • memory/2216-7-0x0000000000230000-0x00000000002BE000-memory.dmp

      Filesize

      568KB

    • memory/2216-6-0x0000000001830000-0x0000000001930000-memory.dmp

      Filesize

      1024KB

    • memory/2216-16-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB