Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-04-2024 03:45

General

  • Target

    e3f9ef50d73f578e4344d7dd930bb2b0_JaffaCakes118.exe

  • Size

    529KB

  • MD5

    e3f9ef50d73f578e4344d7dd930bb2b0

  • SHA1

    497411729f67937ebe745bc01752dbbb28c8a822

  • SHA256

    ea36e5ed4c23da757f8f64b31f5b96eea9b1fcc8ec3b1722b9670dc7534d3b2d

  • SHA512

    dc96d31eff154114dfad6a3b32fc4ad85f6483887bc555f160b2c9b02e4231d215d2c6262d3284452c04a2e85bfff7ed95c2d776f17e28cb4640c0452f751064

  • SSDEEP

    12288:aBWLflW0mPWWzh9wq6OZnCSw8apvVTRAguhwOlY/7k:VflW03eC/1pvV6g4wOa/Y

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3f9ef50d73f578e4344d7dd930bb2b0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e3f9ef50d73f578e4344d7dd930bb2b0_JaffaCakes118.exe"
    1⤵
      PID:3084

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3084-1-0x00000000023F0000-0x00000000024F0000-memory.dmp

      Filesize

      1024KB

    • memory/3084-2-0x0000000004130000-0x00000000041BF000-memory.dmp

      Filesize

      572KB

    • memory/3084-3-0x0000000000400000-0x00000000023EE000-memory.dmp

      Filesize

      31.9MB

    • memory/3084-4-0x0000000000400000-0x00000000023EE000-memory.dmp

      Filesize

      31.9MB

    • memory/3084-6-0x00000000023F0000-0x00000000024F0000-memory.dmp

      Filesize

      1024KB

    • memory/3084-7-0x0000000004130000-0x00000000041BF000-memory.dmp

      Filesize

      572KB