raccoon | 55927123aaddfc0c7d7b720e0f06aadd5bcc52d9b4955da3460b02561fb6447d

Analysis

max time kernel
142s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-03-2024 19:20

Target

5bdc0766d86a74e58055a3940a27feca_JaffaCakes118.exe
Size

560KB
MD5

5bdc0766d86a74e58055a3940a27feca
SHA1

efa03d9af76c4cc13fac9dfeaa173e662beca5d5
SHA256

55927123aaddfc0c7d7b720e0f06aadd5bcc52d9b4955da3460b02561fb6447d
SHA512

bd62121c5162ae11001d8200f7100d5eb734d69b3205adad73a7b19e96864194d4e9c385e0d97c5b22d6474b6febdee2857f9dc7c880b793a91b0c15aa33cded
SSDEEP

12288:UhHQ0DdmGYArMz3+kGNtbLlZB+xCmNrCZ:GHpdYAQz3+kGNDixTO

Score

10^/10

raccoon stealer

Raccoon
Raccoon is an infostealer written in C++ and first seen in 2019.
stealer raccoon

Raccoon Stealer V1 payload 4 IoCs

resource	yara_rule
behavioral1/memory/2012-2-0x0000000000220000-0x00000000002AE000-memory.dmp	family_raccoon_v1
behavioral1/memory/2012-3-0x0000000000400000-0x00000000016FF000-memory.dmp	family_raccoon_v1
behavioral1/memory/2012-5-0x0000000000220000-0x00000000002AE000-memory.dmp	family_raccoon_v1
behavioral1/memory/2012-16-0x0000000000400000-0x00000000016FF000-memory.dmp	family_raccoon_v1

C:\Users\Admin\AppData\Local\Temp\5bdc0766d86a74e58055a3940a27feca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5bdc0766d86a74e58055a3940a27feca_JaffaCakes118.exe"
1⤵
PID:2012

memory/2012-1-0x0000000001860000-0x0000000001960000-memory.dmp

Filesize
1024KB

Download
memory/2012-2-0x0000000000220000-0x00000000002AE000-memory.dmp

Filesize
568KB

Download
memory/2012-3-0x0000000000400000-0x00000000016FF000-memory.dmp

Filesize
19.0MB

Download
memory/2012-5-0x0000000000220000-0x00000000002AE000-memory.dmp

Filesize
568KB

Download
memory/2012-7-0x0000000001860000-0x0000000001960000-memory.dmp

Filesize
1024KB

Download
memory/2012-16-0x0000000000400000-0x00000000016FF000-memory.dmp

Filesize
19.0MB

Download