raccoon | 2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352

Resubmissions

18-12-2024 12:31

31-03-2024 17:58

31-03-2024 17:57

31-03-2024 17:52

max time kernel
142s
max time network
139s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
31-03-2024 17:52

Target

59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118.exe
Size

562KB
MD5

59ff7d1e5dc67270e6a629fc87da34ba
SHA1

525c41353cc2f5706fabe834475efb6227c6851b
SHA256

2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352
SHA512

11845b7e59595f635cd2dce4c04b69b177405403ac66c20668894dd09978858ac9c88dbb14282b5d3f31c8e78d1384f8be41b51de6c968d0b8f47c6a8b562c7a
SSDEEP

12288:NmywsrYuTY4TIYm7gPwI7IpnQzAw298ONmvEFe8KHOx5:AyxYEIYJPd7qQzO6ONxA

Score

10^/10

raccoon stealer

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer V1 payload 3 IoCs

resource	yara_rule
behavioral1/memory/2912-2-0x00000000002C0000-0x000000000034E000-memory.dmp	family_raccoon_v1
behavioral1/memory/2912-3-0x0000000000400000-0x00000000016FF000-memory.dmp	family_raccoon_v1
behavioral1/memory/2912-7-0x00000000002C0000-0x000000000034E000-memory.dmp	family_raccoon_v1

C:\Users\Admin\AppData\Local\Temp\59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118.exe"
1⤵
PID:2912

memory/2912-1-0x0000000001790000-0x0000000001890000-memory.dmp

Filesize
1024KB

Download
memory/2912-2-0x00000000002C0000-0x000000000034E000-memory.dmp

Filesize
568KB

Download
memory/2912-3-0x0000000000400000-0x00000000016FF000-memory.dmp

Filesize
19.0MB

Download
memory/2912-5-0x0000000001790000-0x0000000001890000-memory.dmp

Filesize
1024KB

Download
memory/2912-7-0x00000000002C0000-0x000000000034E000-memory.dmp

Filesize
568KB

Download