Analysis

  • max time kernel
    142s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01-04-2024 18:07

General

  • Target

    76d7015ee5908cf7eae9a864680f479f_JaffaCakes118.exe

  • Size

    572KB

  • MD5

    76d7015ee5908cf7eae9a864680f479f

  • SHA1

    8fe450b1cb9e9e45a841f546c45f3a2f0b1387b2

  • SHA256

    c0612b6bbada59f17891c503ed8c50b09933e7a2c37ffb05bf8de5003e3457ce

  • SHA512

    966d2c361b6ca6309109ace5f2595621ea5088d207ffb1aa0ee2e5af4c33725123cdab4fcd9f7b51bfaed3fc897d185980c694652c244031e5cb29d8925afdfd

  • SSDEEP

    12288:zrre5uBBa/wOvEktXtyug8HYW6avKnPbtUVArhOCTDswV:D+F7vEurHYW6avkPbgAECT1

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\76d7015ee5908cf7eae9a864680f479f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\76d7015ee5908cf7eae9a864680f479f_JaffaCakes118.exe"
    1⤵
      PID:2860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2860-2-0x00000000002D0000-0x000000000035E000-memory.dmp

      Filesize

      568KB

    • memory/2860-1-0x00000000017B0000-0x00000000018B0000-memory.dmp

      Filesize

      1024KB

    • memory/2860-3-0x0000000000400000-0x0000000001702000-memory.dmp

      Filesize

      19.0MB

    • memory/2860-7-0x00000000002D0000-0x000000000035E000-memory.dmp

      Filesize

      568KB

    • memory/2860-6-0x00000000017B0000-0x00000000018B0000-memory.dmp

      Filesize

      1024KB