Overview

overview

10

Static

static

3

9751eadb6e...18.exe

windows7-x64

10

9751eadb6e...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    02-04-2024 21:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9751eadb6eec5f85a1fa0a65faa94e97_JaffaCakes118.exe

  • Size

    593KB

  • MD5

    9751eadb6eec5f85a1fa0a65faa94e97

  • SHA1

    c4ada43e49e55e002c29c81310cd95705a2efd3f

  • SHA256

    0f12f769ccde4c20fb594e1c354fc35383daf0bf6c18468b1fe3b897a4079ae4

  • SHA512

    da45c89acedbfa61d3dbaf8b4e33ff983b16b9c58bc0ef89ae31e3f6725f82c49d464d55a02a38a51888617147753d3e69dd08e8861ae3d5576227683bb706b1

  • SSDEEP

    12288:pOh39TYuAlTmddpmAcpmKNBrrL0cikwbS7Tj:p631YLMDpmNmU0cikd

Score
10/10
raccoonstealer

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon
  • Raccoon Stealer V1 payload 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9751eadb6eec5f85a1fa0a65faa94e97_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9751eadb6eec5f85a1fa0a65faa94e97_JaffaCakes118.exe"
    1⤵
      PID:1680

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1680-2-0x00000000002C0000-0x000000000034E000-memory.dmp

      Filesize

      568KB

      Download

    • memory/1680-3-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

      Download

    • memory/1680-1-0x0000000000860000-0x0000000000960000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1680-5-0x0000000000860000-0x0000000000960000-memory.dmp

      Filesize

      1024KB

      Download

    • memory/1680-15-0x0000000000400000-0x00000000007C6000-memory.dmp

      Filesize

      3.8MB

      Download