Analysis

  • max time kernel
    141s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    02-04-2024 11:04

General

  • Target

    8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe

  • Size

    593KB

  • MD5

    8ad2c5601661f8552195d1450f746848

  • SHA1

    715348760f282e5a00300906fbd37527720f40ac

  • SHA256

    9115464c05c12c6ef4877fc7d77fdac135d2d809c0d59a48c34c16f18cdc0de2

  • SHA512

    59e2c6691a7c40c5ea0755a2d2f9341084dc8de086591b1b8b6497f7dbb1d66e296fffd3ebeeb37bda21452909314a5adb69da31a2d027903164967e35e1dc12

  • SSDEEP

    12288:Ojs/xS9wX8pmTLkJ8a7rsNIsZ8tGq0QQG8geh3YjljrK86sPbIVGs4OIT:Oj4eG8pmTLunPsJZ8tGq0i815YD6sPb5

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe"
    1⤵
      PID:2924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2924-1-0x0000000000880000-0x0000000000980000-memory.dmp

      Filesize

      1024KB

    • memory/2924-2-0x00000000002E0000-0x000000000036E000-memory.dmp

      Filesize

      568KB

    • memory/2924-3-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

    • memory/2924-6-0x0000000000880000-0x0000000000980000-memory.dmp

      Filesize

      1024KB

    • memory/2924-7-0x00000000002E0000-0x000000000036E000-memory.dmp

      Filesize

      568KB

    • memory/2924-16-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB