Analysis

  • max time kernel
    147s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-04-2024 05:14

General

  • Target

    ef3576695625049c61fb99d2d936e99d_JaffaCakes118.exe

  • Size

    541KB

  • MD5

    ef3576695625049c61fb99d2d936e99d

  • SHA1

    142db310e7d37fdafa001d518481e10bcdf1c0c7

  • SHA256

    13fc0008b221405fe318f423dbb688bd769a066f847cb1e6e4d94437b395d0b1

  • SHA512

    2485e6f9eaf213fd52e2c7110c7afc75bac419a3bc7793601222cecab4cce600ebef453de03f63e7d9560f39ec75c291f8a26bd1cdfa717940e76098c9610806

  • SSDEEP

    12288:cCwhwyr52w0uxySWg/LyFCE5MyUzLBAKEedSuWw8KBzWMq:cZhxrNkZ32LzLOIFWnGzl

Score
10/10

Malware Config

Signatures

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

  • Raccoon Stealer V1 payload 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef3576695625049c61fb99d2d936e99d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ef3576695625049c61fb99d2d936e99d_JaffaCakes118.exe"
    1⤵
      PID:4504

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4504-1-0x0000000000A00000-0x0000000000B00000-memory.dmp

      Filesize

      1024KB

    • memory/4504-2-0x0000000000D40000-0x0000000000DCE000-memory.dmp

      Filesize

      568KB

    • memory/4504-3-0x0000000000400000-0x00000000008B8000-memory.dmp

      Filesize

      4.7MB

    • memory/4504-4-0x0000000000400000-0x00000000008B8000-memory.dmp

      Filesize

      4.7MB

    • memory/4504-6-0x0000000000A00000-0x0000000000B00000-memory.dmp

      Filesize

      1024KB

    • memory/4504-7-0x0000000000D40000-0x0000000000DCE000-memory.dmp

      Filesize

      568KB