Analysis

  • max time kernel
    148s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-04-2024 11:04

General

  • Target

    8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe

  • Size

    593KB

  • MD5

    8ad2c5601661f8552195d1450f746848

  • SHA1

    715348760f282e5a00300906fbd37527720f40ac

  • SHA256

    9115464c05c12c6ef4877fc7d77fdac135d2d809c0d59a48c34c16f18cdc0de2

  • SHA512

    59e2c6691a7c40c5ea0755a2d2f9341084dc8de086591b1b8b6497f7dbb1d66e296fffd3ebeeb37bda21452909314a5adb69da31a2d027903164967e35e1dc12

  • SSDEEP

    12288:Ojs/xS9wX8pmTLkJ8a7rsNIsZ8tGq0QQG8geh3YjljrK86sPbIVGs4OIT:Oj4eG8pmTLunPsJZ8tGq0i815YD6sPb5

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8ad2c5601661f8552195d1450f746848_JaffaCakes118.exe"
    1⤵
      PID:4564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4564-1-0x00000000008D0000-0x00000000009D0000-memory.dmp

      Filesize

      1024KB

    • memory/4564-2-0x0000000002590000-0x000000000261E000-memory.dmp

      Filesize

      568KB

    • memory/4564-3-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

    • memory/4564-4-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

    • memory/4564-6-0x00000000008D0000-0x00000000009D0000-memory.dmp

      Filesize

      1024KB

    • memory/4564-7-0x0000000002590000-0x000000000261E000-memory.dmp

      Filesize

      568KB

    • memory/4564-10-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB