General

  • Target

    be5a2897072048974790ed5be8c5898f_JaffaCakes118

  • Size

    880KB

  • Sample

    240404-v1ktxseb54

  • MD5

    be5a2897072048974790ed5be8c5898f

  • SHA1

    5957ea62ae67226a51deea287e6c4c91fc131222

  • SHA256

    1002dd3d5f4dd8e8c7d9ccaf9454cf27e6ef264eb408b8e9fdb5d01c9fe66b84

  • SHA512

    94586cfca9309487dabc16f1c20a55cf1528a5a1a2a6d6f4fc6d2ac47a0890e8d804fd9123aa1678e829ff7d5208190cc8cbfc0f061785251a802fa7fd763401

  • SSDEEP

    24576:EHLmCiIh81qfyn7yG/iUmrmoF3H/dxvBjdrDJ:RMc7D/ixpFH/dxvBjV1

Score
10/10

Malware Config

Targets

    • Target

      be5a2897072048974790ed5be8c5898f_JaffaCakes118

    • Size

      880KB

    • MD5

      be5a2897072048974790ed5be8c5898f

    • SHA1

      5957ea62ae67226a51deea287e6c4c91fc131222

    • SHA256

      1002dd3d5f4dd8e8c7d9ccaf9454cf27e6ef264eb408b8e9fdb5d01c9fe66b84

    • SHA512

      94586cfca9309487dabc16f1c20a55cf1528a5a1a2a6d6f4fc6d2ac47a0890e8d804fd9123aa1678e829ff7d5208190cc8cbfc0f061785251a802fa7fd763401

    • SSDEEP

      24576:EHLmCiIh81qfyn7yG/iUmrmoF3H/dxvBjdrDJ:RMc7D/ixpFH/dxvBjV1

    Score
    10/10
    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks