Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08-04-2024 18:17
Static task
static1
Behavioral task
behavioral1
Sample
e81afc975e052d6912d88768020b3430_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e81afc975e052d6912d88768020b3430_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e81afc975e052d6912d88768020b3430_JaffaCakes118.exe
-
Size
567KB
-
MD5
e81afc975e052d6912d88768020b3430
-
SHA1
b738e0044d9b7e77bd88e6e7008426f067a25099
-
SHA256
8a1d64b1889fa0df80491f3e391b3ec0a446456f396379b763d79d18a0bbf902
-
SHA512
fd4004dd43b9f14075d30870c45000318c94ace64677adf0d0139839d094452b20de81c197cdcda44e8f5e7b0c48a383cd4f4b1e26ee7ae7493c7fcc6e962326
-
SSDEEP
12288:Wv3g0MdwtJq92CbK1sT+Z0deIgDkCfMTxf0UxWNUMq9X7z0atpUQ:Wvzw92CbmCeWiC1xlX7z0q
Malware Config
Extracted
raccoon
1.7.3
cd8dc1031358b1aec55cc6bc447df1018b068607
-
url4cnc
https://telete.in/jagressor_kz
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
Processes:
resource yara_rule behavioral2/memory/3848-2-0x0000000002210000-0x00000000022A1000-memory.dmp family_raccoon_v1 behavioral2/memory/3848-3-0x0000000000400000-0x00000000004A9000-memory.dmp family_raccoon_v1 behavioral2/memory/3848-4-0x0000000000400000-0x00000000004A9000-memory.dmp family_raccoon_v1 behavioral2/memory/3848-7-0x0000000002210000-0x00000000022A1000-memory.dmp family_raccoon_v1
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3848-1-0x00000000004D0000-0x00000000005D0000-memory.dmpFilesize
1024KB
-
memory/3848-2-0x0000000002210000-0x00000000022A1000-memory.dmpFilesize
580KB
-
memory/3848-3-0x0000000000400000-0x00000000004A9000-memory.dmpFilesize
676KB
-
memory/3848-4-0x0000000000400000-0x00000000004A9000-memory.dmpFilesize
676KB
-
memory/3848-5-0x00000000004D0000-0x00000000005D0000-memory.dmpFilesize
1024KB
-
memory/3848-7-0x0000000002210000-0x00000000022A1000-memory.dmpFilesize
580KB