Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-04-2024 06:57

General

  • Target

    859f4f1fdd1ce2579c58eb8052aedce7_JaffaCakes118.exe

  • Size

    435KB

  • MD5

    859f4f1fdd1ce2579c58eb8052aedce7

  • SHA1

    eb0eac62be3c5258974814f42a8ded173d446eb6

  • SHA256

    d9e010fe28c0f9b265a75b920f509e14881b2276402c01b5ecf2eb7413126341

  • SHA512

    23d661753abe5150fddb9b2dde70ceb70c864437412c724f40ac9159c5564671b5c05255387f1805017024027db4daf58ad2af7ba644927678dea7135088f349

  • SSDEEP

    6144:tNhUqk3TZOYjKw5VIDcGzrYIkZFbY7k8Khul+CNcYMjP5zqoM4hVOvH:nhUz3J9Cc2ZqR8KCCjUIhViH

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\859f4f1fdd1ce2579c58eb8052aedce7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\859f4f1fdd1ce2579c58eb8052aedce7_JaffaCakes118.exe"
    1⤵
      PID:4160

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4160-1-0x00000000023A0000-0x00000000024A0000-memory.dmp

      Filesize

      1024KB

    • memory/4160-2-0x0000000003E40000-0x0000000003ECF000-memory.dmp

      Filesize

      572KB

    • memory/4160-3-0x0000000000400000-0x000000000218B000-memory.dmp

      Filesize

      29.5MB

    • memory/4160-6-0x00000000023A0000-0x00000000024A0000-memory.dmp

      Filesize

      1024KB

    • memory/4160-7-0x0000000003E40000-0x0000000003ECF000-memory.dmp

      Filesize

      572KB