Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-04-2024 18:57

General

  • Target

    77d033a3f1fd583cf6836b2d05f196ad_JaffaCakes118.exe

  • Size

    560KB

  • MD5

    77d033a3f1fd583cf6836b2d05f196ad

  • SHA1

    36b6f134a07ae17375d8de3f20a895ee708c5db5

  • SHA256

    ca30cae9fee835a2a12b111864d52a15f92a5a8b0e6fa7ae189833654bff712e

  • SHA512

    e8e5333287f29c5158abf18ab11cf7673f112e8b264dded0e40c3ddc3dcbb044b940cb3e12a8ddc2983cda459930704c241de14926ee4fede85058b9f565645d

  • SSDEEP

    12288:0igYWbWcIadIbTC1aE9/Yz0EH5FULcVvNMOICvzFyZgIIhi:07bNI8GxE9/Yz0CFULOaOI6P

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\77d033a3f1fd583cf6836b2d05f196ad_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\77d033a3f1fd583cf6836b2d05f196ad_JaffaCakes118.exe"
    1⤵
      PID:2964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2964-1-0x00000000019E0000-0x0000000001AE0000-memory.dmp

      Filesize

      1024KB

    • memory/2964-2-0x0000000003480000-0x000000000350E000-memory.dmp

      Filesize

      568KB

    • memory/2964-3-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB

    • memory/2964-4-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB

    • memory/2964-6-0x00000000019E0000-0x0000000001AE0000-memory.dmp

      Filesize

      1024KB

    • memory/2964-7-0x0000000003480000-0x000000000350E000-memory.dmp

      Filesize

      568KB

    • memory/2964-16-0x0000000000400000-0x00000000016FF000-memory.dmp

      Filesize

      19.0MB