Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-04-2024 01:50
Static task
static1
Behavioral task
behavioral1
Sample
e8f0398b50fe3573616e5085580bcedb_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e8f0398b50fe3573616e5085580bcedb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8f0398b50fe3573616e5085580bcedb_JaffaCakes118.exe
-
Size
575KB
-
MD5
e8f0398b50fe3573616e5085580bcedb
-
SHA1
eeb6d2e2bdc9e165922c18da77076686883cd445
-
SHA256
35b4822635133861f722ec498a51cfdcc055226058bc6cd245995e685e10be23
-
SHA512
9d5c88b6ced223fa3a42d1fd2753e6a81d26377a543c22bea6ac88f42ca65e59933283f0610df8fa13292adde8edff53a619f7ceb27cd34e5827e75f1affea78
-
SSDEEP
12288:Z5reVZIKCWy6blbkqlw+aYaYgNz5PjCrGdjfOglu20K:Z6IKCWc8wEajRfpx5
Malware Config
Extracted
raccoon
1.7.3
47d7804050cf1a9fc16d1a8d1e7fe8a3660b9295
-
url4cnc
https://telete.in/h_ghaibin2_1
Signatures
-
Raccoon Stealer V1 payload 4 IoCs
resource yara_rule behavioral2/memory/3260-2-0x0000000000610000-0x00000000006A3000-memory.dmp family_raccoon_v1 behavioral2/memory/3260-3-0x0000000000400000-0x00000000004AB000-memory.dmp family_raccoon_v1 behavioral2/memory/3260-4-0x0000000000400000-0x00000000004AB000-memory.dmp family_raccoon_v1 behavioral2/memory/3260-7-0x0000000000610000-0x00000000006A3000-memory.dmp family_raccoon_v1